CVE-2010-4959

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-10-09 · updated 2026-06-16
Weakness: CWE-89

Description

SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the password parameter.

Affected products

Preproject Pre Podcast Portal: all versions

References

http://secunia.com/advisories/40705
http://securityreason.com/securityalert/8469
http://www.exploit-db.com/exploits/14378
http://www.osvdb.org/66511
http://www.packetstormsecurity.com/1007-exploits/prepodcastportal-sql.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/60631
http://secunia.com/advisories/40705
http://securityreason.com/securityalert/8469
http://www.exploit-db.com/exploits/14378
http://www.osvdb.org/66511
http://www.packetstormsecurity.com/1007-exploits/prepodcastportal-sql.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/60631

Get alerted when CVE-2010-4959 or the next vulnerability affects your stack