CVE-2010-2688

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in detail.asp in Site2Nite Boat Classifieds allows remote attackers to execute arbitrary SQL commands via the ID parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.org/1006-exploits/boatclassdetail-sql.txtExploit
http://secunia.com/advisories/40263Vendor Advisory
http://www.exploit-db.com/exploits/13990Exploit
http://www.osvdb.org/65686
http://www.securityfocus.com/bid/41046Exploit
http://www.vupen.com/english/advisories/2010/1576Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/59671
http://packetstormsecurity.org/1006-exploits/boatclassdetail-sql.txtExploit
http://secunia.com/advisories/40263Vendor Advisory
http://www.exploit-db.com/exploits/13990Exploit
http://www.osvdb.org/65686
http://www.securityfocus.com/bid/41046Exploit
http://www.vupen.com/english/advisories/2010/1576Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/59671

Timeline

Published: Jul 12, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-26897.5SQL injection vulnerability in cont_form.php in Internet DM WebDM CMS allows remote attackers to execute arbitrary SQL commands via the cf_i CVE-2010-26907.5SQL injection vulnerability in the JOOFORGE Gamesbox (com_gamesbox) component 1.0.2, and possibly earlier, for Joomla! allows remote attacke CVE-2010-26917.5Multiple SQL injection vulnerabilities in 2daybiz Custom T-Shirt Design Script allow remote attackers to execute arbitrary SQL commands via CVE-2010-26924.3Cross-site scripting (XSS) vulnerability in 2daybiz Custom T-Shirt Design Script allows remote attackers to inject arbitrary web script or H CVE-2010-26937.2FreeBSD 7.1 through 8.1-PRERELEASE does not copy the read-only flag when creating a duplicate mbuf buffer reference, which allows local user CVE-2010-26947.5SQL injection vulnerability in the redSHOP Component (com_redshop) 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands CVE-2010-26956.5Directory traversal vulnerability in the SFTP/SSH2 virtual server in Xlight FTP Server 3.5.0, 3.5.5, and possibly other versions before 3.6 CVE-2010-26967.5SQL injection vulnerability in gallery/index.php in Sijio Community Software allows remote attackers to execute arbitrary SQL commands via t CVE-2010-26973.5Cross-site scripting (XSS) vulnerability in Sijio Community Software allows remote authenticated users to inject arbitrary web script or HTM CVE-2010-26983.5Multiple cross-site scripting (XSS) vulnerabilities in Sijio Community Software allow remote authenticated users to inject arbitrary web scr CVE-2010-26997.5SQL injection vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allows remote attackers to execute arb CVE-2010-27004.3Cross-site scripting (XSS) vulnerability in index.php in Edge PHP Clickbank Affiliate Marketplace Script (CBQuick) allows remote attackers t