CVE-2010-0955

Description

SQL injection vulnerability in index.php in Bild Flirt Community 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Platforms

Weakness Type

CWE-89

References

• http://4004securityproject.wordpress.com/2010/03/07/bild-flirt-system-v2-0-index…
• http://osvdb.org/62780
• http://packetstormsecurity.org/1003-exploits/bildflirt-sql.txt
• http://secunia.com/advisories/38870
• http://www.exploit-db.com/exploits/11648
• http://www.securityfocus.com/bid/38585