Every CVE Search/ Get API key

CVE-2010-4997

SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to...

7.5 HighPublic exploit

SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action.

Exploit likelihood

0.91%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action.

Record
CVE-2010-4997
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-89
Updated
2026-11-02
CVE List No score

SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action.

Record
CVE-2010-4997
Updated
2026-11-02
EUVDEUVD-2010-4961 No score

SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action.

Record
EUVD-2010-4961
Updated
2026-11-03
GitHub AdvisoriesGHSA-v5h4-mp28-fj56 No score

SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to...

SQL injection vulnerability in index.php in OlyKit Swoopo Clone 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter in a product action.

Record
GHSA-v5h4-mp28-fj56
Weakness
CWE-89
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBSwoopo Clone 2010 - SQL Injection2010-06-27

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-4997 is a high vulnerability (CVSS 7.5) in Olykit Swoopo Clone 2010, published November 2, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.91%, the 60th percentile. No source names a fixed version.

References

MoveEnter Open