CVE-2010-5292
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2010-5292
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Amberdms Billing System (ABS) before 1.4.1, when a multi-instance installation is configured, might allow local users to obtain sensitive information by reading the cache in between runs of the include/cron/services_usage.php cron job.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Amberdms Billing System 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Amberdms Billing System（ABS）是一套开源的基于Web的计费平台。该平台专为中小型企业设计开发，并提供会计、发票、服务管理等功能。 ABS 1.4.0及之前的版本中存在信息泄露漏洞，当配置多个实例进行安装时，本地攻击者可通过读取缓存利用该漏洞获取敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2010-5292
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-5292
Please Login to view more intelligence information
- https://raw.github.com/jethrocarr/amberdms-bs/master/help/docs/CHANGELOGx_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2010-5292
Same Patch Batch · n/a · 2014-01-10 · 24 CVEs total
| CVE-2014-1405 | Conceptronic C54APM 开放重定向漏洞 | |
| CVE-2014-1234 | paratrooper-newrelic gem for Ruby 信息泄露漏洞 | |
| CVE-2014-1233 | paratrooper-pingdom gem for Ruby 信息泄露漏洞 | |
| CVE-2013-7282 | Nisuta NS-WIR150NE和NS-WIR300N 授权问题漏洞 | |
| CVE-2013-6974 | Cisco Secure Access Control System 跨站脚本漏洞 | |
| CVE-2013-6334 | 多款IBM Atlas Suite产品输入验证漏洞 | |
| CVE-2013-6321 | 多款IBM Atlas Suite产品SQL注入漏洞 | |
| CVE-2014-1236 | Graphviz ‘chkNum’函数基于栈的缓冲区溢出漏洞 | |
| CVE-2013-4460 | MantisBT ‘account_sponsor_page.php’跨站脚本漏洞 | |
| CVE-2014-1408 | Conceptronic C54APM 信任管理漏洞 | |
| CVE-2014-1407 | Conceptronic C54APM 跨站脚本漏洞 | |
| CVE-2014-1406 | Conceptronic C54APM CRLF注入漏洞 | |
| CVE-2014-0977 | Six Apart Movable Type Rich Text Editor组件跨站脚本漏洞 | |
| CVE-2014-0664 | Cisco Unity Connection IMAP 拒绝服务漏洞 | |
| CVE-2014-0663 | Cisco Secure Access Control System 跨站脚本漏洞 | |
| CVE-2014-0658 | Cisco 9900 Unified IP Phones 输入验证漏洞 | |
| CVE-2013-7289 | Andy's PHP Knowledgebase 跨站脚本漏洞 | |
| CVE-2013-7288 | MyBB ‘mycode_parse_video’函数跨站脚本漏洞 | |
| CVE-2013-5011 | Symantec Endpoint Protection 非引用Windows搜索路径漏洞 | |
| CVE-2013-5010 | Symantec Endpoint Protection 权限许可和访问控制漏洞 |
Showing top 20 of 24 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service - CVE-2026-8267
Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of s - CVE-2026-8266
Open5GS SMF gsm-build.c gsm_build_pdu_session_establishment_
V. Comments for CVE-2010-5292
No comments yet