CVE-2010-1094

N/A Unknown

Published: March 24, 2010 Modified: April 29, 2026

Description

SQL injection vulnerability in news.php in DZ EROTIK Auktionshaus V4rgo allows remote attackers to execute arbitrary SQL commands via the id parameter.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://4004securityproject.wordpress.com/2010/02/26/dz-erotik-auktionshaus-v-4-rgo-news-php-sql-injection/

Source: cve@mitre.org

Exploit

http://osvdb.org/62623

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/38792

Source: cve@mitre.org

Vendor Advisory

http://www.exploit-db.com/exploits/11582

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/56581

Source: cve@mitre.org

http://4004securityproject.wordpress.com/2010/02/26/dz-erotik-auktionshaus-v-4-rgo-news-php-sql-injection/