CVE-2010-2319
high
CVSS v3
—
CVSS v4 NEW
—
VIR risk
8.5
Description
SQL injection vulnerability in index.php in IDevSpot TextAds 2.08 allows remote attackers to execute arbitrary SQL commands via the page parameter.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Exploits
Public proof-of-concept code below. AS-IS, for defenders and authorised testing only.
Exploit-DB
idevspot Text ads 2.08 - SQL Injection
# Title:idevspot Text ads 2.08 sqli vulnerability
# Author: Sid3^effects
# Published: 2010-06-06
# price:$147
# email:shell_c99@yahoo.com
# vendor: idevspot
# url : http://www.idevspot.com/TextAds2.php
# google dork : Powered by TextAds 2.08
############################################################################
ooooo .oooooo. oooooo oooooo oooo
`888' d8P' `Y8b `888. `888. .8'
888 888 `888. .8888. .8'
888 888 `888 .8'`888. .8'
888 888 `888.8' `888.8'
888 `88b ooo `888' `888'
o888o `Y8bood8P' `8' `8'
--------------------------------------------------------------------------------------
#####################Sid3^effects aKa HaRi##################################
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors]
#Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L,CR4C|< 008,M4n0j,MaYuR
#ShouTZ:kedar,dec0d3r,41.w4r10r
#spl shoutz:LiquidWorm,gunslinger_ :D
#Catch us at www.andhrahackers.com or www.teamicw.in
############################################################################
Description :
Increase your website revenue by selling text advertisement spots on your website. TextAds is a fully automated,
impression based text advertisement system. It includes client and administrative control panels and supports
Paypal (client) billing. Our easy installation will have most users up and running quickly. Customization is also
quite easy, even for the non-programmer. Many additional features are yours as well with TextAds, please come
check them out at our website
############################################################################
Xploit :
The idevspot TextAds V2.08 suffers from sqli
Demo : http://server/textads_2/index.php?page=[sqli]
############################################################################
#spl thks: exploit-db.com
#Sid3^effects Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| idevspot | textads | 2.08 | |
References
CWEs
CWE-89
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.