Unrated severityNVD Advisory· Published Jun 18, 2010· Updated Jun 16, 2026
CVE-2010-2339
CVE-2010-2339
Description
SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids[] parameter in an update_pages action.
Affected products
8cpe:2.3:a:subdreamer:subdreamer:3.0.0:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:subdreamer:subdreamer:3.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:subdreamer:subdreamer:3.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:subdreamer:subdreamer:3.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:subdreamer:subdreamer:3.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:subdreamer:subdreamer:3.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:subdreamer:subdreamer:3.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:subdreamer:subdreamer:3.1.1:*:*:*:*:*:*:*
- (no CPE)range: 3.x.x
Patches
Vulnerability mechanics
References
6- www.vupen.com/english/advisories/2010/1476nvdVendor Advisory
- packetstormsecurity.org/1006-advisories/major_rls73.txtnvd
- www.majorsecurity.net/subdreamer_cms_sql_injection.phpnvd
- www.securityfocus.com/archive/1/511818nvd
- www.securityfocus.com/bid/40849nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/59441nvd
News mentions
0No linked articles in our index yet.