CVE-2010-1078

SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbitrary SQL commands via encoded null…

published March 23, 2010

CVSS
—
EPSS
1%
Percentile
63.5
In the wild
Unconfirmed
What it is

SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbitrary SQL commands via encoded null bytes ("%00") in the view parameter, which bypasses a protection mechanism.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01034 · 63.5th percentile
Published
2010-03-23T19:00Z
EPSS history
Timeline
  • 23 MAR 19:00Z
    SQL injection vulnerability in archive.php in XlentProjects SphereCMS 1.1 alpha allows remote attackers to execute arbitrary SQL commands via encoded null…
    cvelistv5