Vulnerabilities (CVE)

Filtered by vendor Blentz Subscribe
Filtered by product Smbind
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-3076 1 Blentz 1 Smbind 2024-02-28 7.5 HIGH N/A
The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a certain regular expression, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via the username parameter to the admin login page.