Unrated severityNVD Advisory· Published May 10, 2011· Updated Apr 29, 2026

CVE-2011-2080

Description

Multiple SQL injection vulnerabilities in MediaCAST 8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) a CP_ENLARGESTYLE cookie to the default URI under inventivex/managetraining/ or (2) unspecified input to authenticate_ad_setup_finished.cfm.

Affected products

Inventivetec/Mediacast
cpe:2.3:a:inventivetec:mediacast:*:*:*:*:*:*:*:*
Range: <=8

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txtnvdExploit
secunia.com/advisories/44182nvdVendor Advisory
securityreason.com/securityalert/8245nvd
exchange.xforce.ibmcloud.com/vulnerabilities/67220nvd
exchange.xforce.ibmcloud.com/vulnerabilities/67221nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000