CVE-2010-1270
SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote...
SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the id_auk parameter.
Exploit likelihood
What each source reports
NVD Score used
SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the id_auk parameter.
- Record
CVE-2010-1270- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the id_auk parameter.
- Record
CVE-2010-1270- Updated
- 2026-11-02
EUVDEUVD-2010-1299 No score
SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the id_auk parameter.
- Record
EUVD-2010-1299- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2h96-rm96-pqh7 No score
SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote...
SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the id_auk parameter.
- Record
GHSA-2h96-rm96-pqh7- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | phpscripte24 Auktionshaus Community Standart System - Blind SQL Injection | 2010-03-16 |
| Exploit-DB | phpscripte24 Niedrig Gebote Pro Auktions System II - Blind SQL Injection | 2010-03-18 |
| Exploit-DB | Multi Auktions Komplett System 2 - Blind SQL Injection | 2010-03-28 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1270 is a high vulnerability (CVSS 7.5) in Phpscripte24 Multi Suktions Komplett System, published April 6, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.20%, the 68th percentile. No source names a fixed version.
References
4004securityproject.wordpress.com/2010/03/16/phpscripte24-auktionshaus-community-standart-system
packetstormsecurity.org/1003-exploits/multiauktions-sql.txt
exploit-db.com/exploits/11776
osvdb.org/63048
exchange.xforce.ibmcloud.com/vulnerabilities/56935
secunia.com/advisories/38971
securityfocus.com/bid/38793
nvd.nist.gov/vuln/detail/CVE-2010-1270
github.com/advisories/GHSA-2h96-rm96-pqh7