← Database

CVE-2010-2135

HIGH CVSS: 7.5 Published: 2010-06-02 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in login.php in HazelPress Lite 0.0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) password fields.

Affected Platforms

Hazelpress Hazelpress

Weakness Type

CWE-89

References