CVE-2010-2339
SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to...
SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids[] parameter in an update_pages action.
Exploit likelihood
What each source reports
NVD Score used
SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids[] parameter in an update_pages action.
- Record
CVE-2010-2339- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids[] parameter in an update_pages action.
- Record
CVE-2010-2339- Updated
- 2026-11-02
EUVDEUVD-2010-2349 No score
SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids[] parameter in an update_pages action.
- Record
EUVD-2010-2349- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hxvx-q4xc-7x53 No score
SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to...
SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids[] parameter in an update_pages action.
- Record
GHSA-hxvx-q4xc-7x53- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-2339 is a high vulnerability (CVSS 7.5) in Subdreamer, published June 18, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 69th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2010/1476
securityfocus.com/bid/40849
packetstormsecurity.org/1006-advisories/major_rls73.txt
exchange.xforce.ibmcloud.com/vulnerabilities/59441
majorsecurity.net/subdreamer_cms_sql_injection.php
nvd.nist.gov/vuln/detail/CVE-2010-2339
github.com/advisories/GHSA-hxvx-q4xc-7x53