CVE-2010-2135

CVE-2010-2135 describes multiple SQL injection vulnerabilities in login.php of HazelPress Lite 0.0.4 and earlier, allowing remote attackers to execute arbitrary SQL commands through the Username and password fields. With a CVSS score of 7.5, this vulnerability is highly severe due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog, an authentication bypass exploit (EDB-11602) is publicly available, though there is no evidence of active exploitation or significant community discussion.