CVE-2010-0723

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.85%

Published

Feb 26, 2010

Modified

Apr 28, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBEro Auktion 2.0 - 'news.php' SQL Injection Exploit-DBEro Auktion 2010 - 'news.php' SQL Injection TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in news.php in Ero Auktion 2.0 and 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Weaknesses (CWE)

CWE-89

Affected Products (2)

mhproducts · ero_auktionvulnerable

References (16)

http://4004securityproject.wordpress.com/2010/02/21/ero-auktion-2010-sql-injection-news-php/

Exploit

http://4004securityproject.wordpress.com/2010/02/21/ero-auktion-v-2-0-sql-injection-news-php/

Exploit

http://packetstormsecurity.org/1002-exploits/eroauktion20-sql.txt

Exploit

http://packetstormsecurity.org/1002-exploits/eroauktion2010-sql.txt

Exploit

http://secunia.com/advisories/38666

Vendor Advisory

http://www.exploit-db.com/exploits/11521

Exploit

http://www.exploit-db.com/exploits/11522

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/56446

http://4004securityproject.wordpress.com/2010/02/21/ero-auktion-2010-sql-injection-news-php/

Exploit

http://4004securityproject.wordpress.com/2010/02/21/ero-auktion-v-2-0-sql-injection-news-php/

Exploit

http://packetstormsecurity.org/1002-exploits/eroauktion20-sql.txt

Exploit

http://packetstormsecurity.org/1002-exploits/eroauktion2010-sql.txt

Exploit

http://secunia.com/advisories/38666

Vendor Advisory

http://www.exploit-db.com/exploits/11521

Exploit

http://www.exploit-db.com/exploits/11522

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/56446

KEV Catalog EPSS Scores Vendors All CVEs