VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 17, 2010· Updated Apr 29, 2026

CVE-2010-2826

CVE-2010-2826

Description

SQL injection vulnerability in Cisco Wireless Control System (WCS) 6.0.x before 6.0.196.0 allows remote authenticated users to execute arbitrary SQL commands via vectors related to the ORDER BY clause of the Client List screens, aka Bug ID CSCtf37019.

Affected products

6
  • Cisco Systems, Inc./Wireless Control System Software6 versions
    cpe:2.3:a:cisco:wireless_control_system_software:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:cisco:wireless_control_system_software:*:*:*:*:*:*:*:*range: <=6.0.188.0
    • cpe:2.3:a:cisco:wireless_control_system_software:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:wireless_control_system_software:6.0.132.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:wireless_control_system_software:6.0.170.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:wireless_control_system_software:6.0.181.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:wireless_control_system_software:6.0.182.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.