CVE-2010-3076
The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4...
The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a certain regular expression, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via the username parameter to the admin login page.
Exploit likelihood
What each source reports
NVD Score used
The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a certain regular expression, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via the username parameter to the admin login page.
- Record
CVE-2010-3076- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a certain regular expression, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via the username parameter to the admin login page.
- Record
CVE-2010-3076- Updated
- 2026-11-02
EUVDEUVD-2010-3078 No score
The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a certain regular expression, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via the username parameter to the admin login page.
- Record
EUVD-2010-3078- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jg6w-g8mj-cg8m No score
The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4...
The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a certain regular expression, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via the username parameter to the admin login page.
- Record
GHSA-jg6w-g8mj-cg8m- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
smbindDebian:5.0 |
before 0.4.7-3+lenny1, plus listed versions 0.4.7-3 |
0.4.7-3+lenny1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3076 is a high vulnerability (CVSS 7.5) in Blentz Smbind, published September 5, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.84%, the 79th percentile. Fixed in smbind 0.4.7-3+lenny1.
References
openwall.com/lists/oss-security/2010/09/05/5
sourceforge.net/projects/smbind/files/smbind/0.4.8/smbind-0.4.8.tar.bz2/download
debian.org/security/2010/dsa-2103
packetstormsecurity.org/1009-exploits/smbind-sql.txt
nvd.nist.gov/vuln/detail/CVE-2010-3076
github.com/advisories/GHSA-jg6w-g8mj-cg8m