CVE-2010-1660

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in help-details.php in CLScript Classifieds Script allows remote attackers to execute arbitrary SQL commands via the hpId parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.org/1004-exploits/clscriptclassfieds-sql.txtExploit
http://secunia.com/advisories/39612Vendor Advisory
http://www.exploit-db.com/exploits/12423Exploit
http://www.securityfocus.com/bid/39737Exploit
http://www.vupen.com/english/advisories/2010/1010Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/58181
http://packetstormsecurity.org/1004-exploits/clscriptclassfieds-sql.txtExploit
http://secunia.com/advisories/39612Vendor Advisory
http://www.exploit-db.com/exploits/12423Exploit
http://www.securityfocus.com/bid/39737Exploit
http://www.vupen.com/english/advisories/2010/1010Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/58181

Timeline

Published: May 3, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-16617.5Multiple SQL injection vulnerabilities in PHP-Quick-Arcade (PHPQA) 3.0.21 allow remote attackers to execute arbitrary SQL commands via the (CVE-2010-16624.3Cross-site scripting (XSS) vulnerability in acpmoderate.php in PHP-Quick-Arcade (PHPQA) 3.0.21 allows remote attackers to inject arbitrary w CVE-2010-166310.0The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before 4.1.249.1064 allows remote attackers to bypass the Same Orig CVE-2010-16645.0Google Chrome before 4.1.249.1064 does not properly handle HTML5 media, which allows remote attackers to cause a denial of service (memory c CVE-2010-16657.5Google Chrome before 4.1.249.1064 does not properly handle fonts, which allows remote attackers to cause a denial of service (memory corrupt CVE-2010-16666.8Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of ser CVE-2010-16674.3Multiple cross-site scripting (XSS) vulnerabilities in Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 allow remote attacke CVE-2010-16686.8Multiple cross-site request forgery (CSRF) vulnerabilities in Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 allow remote CVE-2010-16697.5SQL injection vulnerability in Mahara 1.1.x before 1.1.9 and 1.2.x before 1.2.5 allows remote attackers to execute arbitrary SQL commands vi CVE-2010-16707.5Mahara before 1.0.15, 1.1.x before 1.1.9, and 1.2.x before 1.2.5 has improper configuration options for authentication plugins associated wi CVE-2010-16717.2hsolinkcontrol in hsolink 1.0.118 allows local users to gain privileges via shell metacharacters in command-line arguments, as demonstrated CVE-2010-16736.1A cross-site scripting (XSS) vulnerability in ikiwiki before 3.20101112 allows remote attackers to inject arbitrary web script or HTML via a