PT-2023-9914 · Unknown · Weblabyrinth

Published 2023-02-07 · Updated 2024-05-17 · CVE-2011-10002

Positive Technologies (AI Summary)

CVSS v2.0

5.2

Medium

Base vector

AV:A/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions weblabyrinth version 0.3.1

Description A critical vulnerability has been found in weblabyrinth, affecting the Labyrinth function of the file labyrinth.inc.php. This issue leads to sql injection.

Recommendations For weblabyrinth version 0.3.1, upgrade to version 0.3.2 to address this issue.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2011-10002

Affected Products

Weblabyrinth

References · 10

• 🔥 https://code.google.com/archive/p/weblabyrinth/issues/1 · Exploit
• 🔥 https://storage.googleapis.com/google-code-archive-downloads/v2/code.google.com/weblabyrinth/weblabyrinth-0.3.2.tar.gz · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-10002 · Security Note
• https://github.com/rotelok/weblabyrinth/commit/60793fd8c8c4759596d3510641e96ea40e7f60e9 · Patch
• https://t.me/cibsecurity/57682 · Telegram Post
• https://vuldb.com/?ctiid.220221 · Note
• https://t.me/cvenotify/43791 · Telegram Post
• https://t.me/cvenotify/44370 · Telegram Post
• https://t.me/cvenotify/59363 · Telegram Post
• https://vuldb.com/?id.220221 · Note