CVE-2010-3404

no score yetEPSS 1.0%

Multiple SQL injection vulnerabilities in eshtery CMS (aka eshtery.com) allow remote attackers to execute arbitrary SQL commands via the (1) Criteria field in an unspecified form related to catlgsearch.aspx or (2) user name to an unspecified form related to adminlogin.aspx.

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2010-09-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

eshtery.she7ata:eshtery_cms

References

http://www.exploit-db.com/exploits/14980
http://www.securityfocus.com/bid/43168
https://exchange.xforce.ibmcloud.com/vulnerabilities/61767
http://www.exploit-db.com/exploits/14980
http://www.securityfocus.com/bid/43168

Check your stack JSON