CVE-2010-3404

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-09-16 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL commands via the (1) Criteria field in an unspecified form related to catlgsearch.aspx or (2) user name to an unspecified form related to adminlogin.aspx.

Affected products

Eshtery.She7Ata Eshtery Cms: all versions

References

http://www.exploit-db.com/exploits/14980
http://www.securityfocus.com/bid/43168
https://exchange.xforce.ibmcloud.com/vulnerabilities/61767
http://www.exploit-db.com/exploits/14980
http://www.securityfocus.com/bid/43168
https://exchange.xforce.ibmcloud.com/vulnerabilities/61767

Get alerted when CVE-2010-3404 or the next vulnerability affects your stack