← Database

CVE-2010-1049

HIGH CVSS: 7.5 Published: 2010-03-23 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to execute arbitrary SQL commands via the (1) noentryid parameter to blog/index.php and the (2) p parameter to index2.php.

Affected Platforms

Uiga Business Portal

Weakness Type

CWE-89

References