Executive Summary

Informations
Name	CVE-2010-5020	First vendor Publication	2011-11-02
Vendor	Cve	Last vendor Modification	2011-11-17

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

SQL injection vulnerability in index.php in NetArt Media iBoutique 4.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-5020

CWE : Common Weakness Enumeration

id	Name
CWE-89	Improper Sanitization of Special Elements used in an SQL Command ('SQL Injection')

CPE : Common Platform Enumeration

Type	Description	Count
Application	Netartmedia Iboutique cpe:/a:netartmedia:iboutique:4.0	1

Open Source Vulnerability Database (OSVDB)

id	Description
76887	NetArt Media iBoutique index.php page Parameter SQL Injection

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/41014
EXPLOIT-DB	http://www.exploit-db.com/exploits/13945
SECUNIA	http://secunia.com/advisories/31871

Alert History

Date	Informations
2013-05-10 23:40:32	Multiple Updates