Skip to content

CVE-2010-1092

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software...

7.5 HighPublic exploit

CVE-2010-1092 is a high vulnerability (CVSS 7.5) in Scriptsfeed Business Directory Software, published March 24, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.15%, the 66th percentile. No source names a fixed version.

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the (1) us and (2) ps parameters.

Exploit likelihood

1.15%Unchanged since Feb 4, 2022

What each source reports

NVD Score used 7.5

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the (1) us and (2) ps parameters.

Record: CVE-2010-1092
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-89
Updated: 2026-11-02

CVE List No score

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the (1) us and (2) ps parameters.

Record: CVE-2010-1092
Updated: 2026-11-02

EUVDEUVD-2010-1124 No score

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the (1) us and (2) ps parameters.

Record: EUVD-2010-1124
Updated: 2026-11-03

GitHub AdvisoriesGHSA-9g3p-5mff-vc5c No score

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software...

Multiple SQL injection vulnerabilities in login.php in ScriptsFeed Business Directory Software allow remote attackers to execute arbitrary SQL commands via the (1) us and (2) ps parameters.

Record: GHSA-9g3p-5mff-vc5c
Weakness: CWE-89
Updated: 2026-11-02

Affected products

scriptsfeed business directory software

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Scripts Feed Business Directory - SQL Injection	2010-02-27

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References