VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 17, 2010· Updated Jun 16, 2026

CVE-2010-2826

CVE-2010-2826

Description

SQL injection vulnerability in Cisco Wireless Control System (WCS) 6.0.x before 6.0.196.0 allows remote authenticated users to execute arbitrary SQL commands via vectors related to the ORDER BY clause of the Client List screens, aka Bug ID CSCtf37019.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Cisco Systems, Inc./Wireless Control System7 versions
    cpe:2.3:a:cisco:wireless_control_system_software:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:cisco:wireless_control_system_software:*:*:*:*:*:*:*:*range: <=6.0.188.0
    • cpe:2.3:a:cisco:wireless_control_system_software:6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:wireless_control_system_software:6.0.132.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:wireless_control_system_software:6.0.170.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:wireless_control_system_software:6.0.181.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:wireless_control_system_software:6.0.182.0:*:*:*:*:*:*:*
    • (no CPE)range: >= 6.0, < 6.0.196.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.