SQL Injection Vulnerability in UCenter Home 2.0 by UCenter
CVE-2010-4912
Currently unrated
Key Information:
- Vendor
Discuz
- Status
- Vendor
- CVE Published:
- 8 October 2011
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2010-4912?
A SQL injection vulnerability exists in the shop.php file of UCenter Home 2.0. This flaw allows remote attackers to manipulate SQL queries executed on the server by injecting arbitrary SQL code through the 'shopid' parameter. Successful exploitation could lead to unauthorized access to sensitive database information, posing significant risks to the security and integrity of the application. It is essential for users of UCenter Home 2.0 to apply security updates and implement input validation measures to mitigate potential exploits.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.