CVE-2010-0701

NONE

Published Feb 23, 201016y ago · Modified Jun 16, 20262w ago

Published Feb 23, 2010 16y ago

Last Modified Jun 16, 2026 2w ago

Description

SQL injection vulnerability in ForceChangePassword.jsp in Newgen Software OmniDocs allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-89 SQL Injection Injection

Affected Products 1

Vendor	Product	Version	Range
newgensoft	omnidocs	*	any

References 6

osvdb.org http://osvdb.org/62403
packetstormsecurity.org http://packetstormsecurity.org/1002-exploits/omnidocs-sql.txt

Exploit
secunia.com http://secunia.com/advisories/38527

Vendor Advisory
exploit-db.com http://www.exploit-db.com/exploits/11393

Exploit
securityfocus.com http://www.securityfocus.com/bid/38304
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/56237

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.