CVE-2010-5023
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote...
CVE-2010-5023 is a high vulnerability (CVSS 7.5) in Cramerdev Digital Interchange Calendar, published November 2, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.15%, the 67th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 1.15%EPSS, 67th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intDivisionID parameter.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Digital Interchange Calendar - SQL Injection | 2010-06-13 |
What each source reports
NVD Score used
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intDivisionID parameter.
- Record
CVE-2010-5023- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE ListNo score
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intDivisionID parameter.
- Record
CVE-2010-5023- Updated
- 2026-11-02
EUVDEUVD-2010-4987No score
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intDivisionID parameter.
- Record
EUVD-2010-4987- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mmqq-w654-xx8hNo score
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote...
SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intDivisionID parameter.
- Record
GHSA-mmqq-w654-xx8h- Weakness
- CWE-89
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
exploit-db.com/exploits/13860
vupen.com/english/advisories/2010/1464
securityreason.com/securityalert/8513
securityfocus.com/bid/40829
packetstormsecurity.org/1006-exploits/digitalinterchange-sql.txt
exchange.xforce.ibmcloud.com/vulnerabilities/59425
nvd.nist.gov/vuln/detail/CVE-2010-5023
github.com/advisories/GHSA-mmqq-w654-xx8h