{ "schema_version": "1.4.0", "id": "GHSA-x59q-qxmc-6v7m", "modified": "2022-05-17T04:18:14Z", "published": "2022-05-17T04:18:14Z", "aliases": [ "CVE-2010-5317" ], "details": "Multiple SQL injection vulnerabilities in index.php in SweetRice CMS before 0.6.7.1 allow remote attackers to execute arbitrary SQL commands via (1) the file_name parameter in an attachment action, (2) the post parameter in a show_comment action, (3) the sys-name parameter in an rssfeed action, or (4) the sys-name parameter in a view action.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-5317" }, { "type": "WEB", "url": "https://www.htbridge.com/advisory/HTB22667" } ], "database_specific": { "cwe_ids": [ "CWE-89" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2015-01-03T11:59:00Z" } }