CVE-2010-5023

CVSS 7.5 - HIGH

Description

SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intDivisionID parameter.

Affected Products

Vendor	Product	Version
cramerdev	digital_interchange_calendar	`5.8.5`

References

http://packetstormsecurity.org/1006-exploits/digit...

http://securityreason.com/securityalert/8513

http://www.exploit-db.com/exploits/13860

http://www.securityfocus.com/bid/40829

http://www.vupen.com/english/advisories/2010/1464

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

http://packetstormsecurity.org/1006-exploits/digit...

http://securityreason.com/securityalert/8513

http://www.exploit-db.com/exploits/13860

http://www.securityfocus.com/bid/40829

http://www.vupen.com/english/advisories/2010/1464

https://exchange.xforce.ibmcloud.com/vulnerabiliti...

Weakness Types

CWE-89

CVE Information

CVE ID:: CVE-2010-5023
Published:: 2011-11-02
Modified:: 2026-04-29
CVSS Score:: 7.5
Severity:: HIGH
Vector:: AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Vendors

cramerdev

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL