What’s Vulnerable › Vulnerabilities

CVE-2010-5291

• Severity: medium (CVSS 6.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-01-10 · updated 2026-06-16
• Weakness: CWE-264

Description

Amberdms Billing System (ABS) before 1.4.1 does not properly implement blacklisting after detection of invalid login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach.

Affected products

• Amberdms Billing System: through 1.4.0; 1.0.0, 1.1.0, 1.2.0, 1.3.0

References

• https://projects.jethrocarr.com/p/oss-amberdms-bs/source/tree/f23f1121bd137bf798c8d3f01d35fa297a285331/help/docs/RELEASE_NOTES
• https://raw.github.com/jethrocarr/amberdms-bs/master/help/docs/CHANGELOG
• https://projects.jethrocarr.com/p/oss-amberdms-bs/source/tree/f23f1121bd137bf798c8d3f01d35fa297a285331/help/docs/RELEASE_NOTES
• https://raw.github.com/jethrocarr/amberdms-bs/master/help/docs/CHANGELOG

Get alerted when CVE-2010-5291 or the next vulnerability affects your stack