CVE-2010-5021
SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5...
CVE-2010-5021 is a high vulnerability (CVSS 7.5) in Cramerdev Document Library, published November 2, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.19%, the 68th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 1.19%EPSS, 68th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intGroupID parameter.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Digital Interchange Document Library - SQL Injection | 2010-06-13 |
What each source reports
NVD Score used 7.5
SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intGroupID parameter.
- Record
CVE-2010-5021- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE ListNo score
SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intGroupID parameter.
- Record
CVE-2010-5021- Updated
- 2026-11-02
EUVDEUVD-2010-4985No score
SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intGroupID parameter.
- Record
EUVD-2010-4985- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jwgg-c32x-8m3wNo score
SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5...
SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intGroupID parameter.
- Record
GHSA-jwgg-c32x-8m3w- Weakness
- CWE-89
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
vupen.com/english/advisories/2010/1461
securityreason.com/securityalert/8512
packetstormsecurity.org/1006-exploits/digitalinterchangelibrary-sql.txt
exchange.xforce.ibmcloud.com/vulnerabilities/59397
secunia.com/advisories/40160
exploit-db.com/exploits/13859
securityfocus.com/bid/40819
nvd.nist.gov/vuln/detail/CVE-2010-5021
github.com/advisories/GHSA-jwgg-c32x-8m3w