CVE-2010-10007

CVE-2010-10007 describes a critical SQL injection vulnerability in the lierdakil click-reminder project, specifically within the db_query function of src/backend/include/BaseAction.php. This flaw allows an unauthenticated attacker to execute arbitrary SQL commands, potentially leading to full compromise of the affected system. Rated with a CVSS score of 9.8 (Critical), this vulnerability has a low attack complexity and requires no user interaction, making it easily exploitable over the network. Successful exploitation can result in high impacts to confidentiality, integrity, and availability. Despite its critical severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE. It's important to note that this vulnerability affects an unsupported product, meaning official patches or updates are unlikely.