CVE-2010-3076
Last modified
CVE-2010-3076 is a vulnerability of currently unknown severity. The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a certain regular expression, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via the username parameter to the admin login page.. EPSS estimates a 1.88% chance of exploitation in the next 30 days.
Description
The filter function in php/src/include.php in Simple Management for BIND (aka smbind) before 0.4.8 does not anchor a certain regular expression, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via the username parameter to the admin login page.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Blentz | Smbind | <= 0.4.7 |
| Blentz | Smbind | 0.2 |
| Blentz | Smbind | 0.2.1 |
| Blentz | Smbind | 0.3.1 |
| Blentz | Smbind | 0.4 |
| Blentz | Smbind | 0.4.1 |
| Blentz | Smbind | 0.4.2 |
| Blentz | Smbind | 0.4.3 |
| Blentz | Smbind | 0.4.4 |
| Blentz | Smbind | 0.4.5 |
| Blentz | Smbind | 0.4.6 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-3076?
How severe is CVE-2010-3076?
How do I fix CVE-2010-3076?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-3070Cross-site scripting (XSS) vulnerability in NuSOAP 0.9.5, as…
- CVE-2010-3071bip before 0.8.6 allows remote attackers to cause a denial o…
- CVE-2010-3072The string-comparison functions in String.cci in Squid 3.x b…
- CVE-2010-3073SSL_Cipher.cpp in EncFS before 1.7.0 does not properly handl…
- CVE-2010-3074SSL_Cipher.cpp in EncFS before 1.7.0 uses an improper combin…
- CVE-2010-3075EncFS before 1.7.0 encrypts multiple blocks by means of the …
- CVE-2010-3077Cross-site scripting (XSS) vulnerability in util/icon_browse…
- CVE-2010-3078The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioct…5.5
- CVE-2010-3079kernel/trace/ftrace.c in the Linux kernel before 2.6.35.5, w…5.5
- CVE-2010-3080Double free vulnerability in the snd_seq_oss_open function i…
- CVE-2010-3081The compat_alloc_user_space functions in include/asm/compat.…7.8
- CVE-2010-3082Cross-site scripting (XSS) vulnerability in Django 1.2.x bef…
Are you affected by CVE-2010-3076?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST