Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2010-20112— Amlibweb NetOpacs webquery.dll Stack Buffer Overflow

Quick assessment

Affected
Amlib Amlibweb Library Management System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Amlib NetOpacs是英国Amlib公司的一个图书馆管理系统中的目录模块。 Amlib NetOpacs存在安全漏洞，该漏洞源于未限制HTTP GET参数输入长度，可能导致栈缓冲区溢出和控制流劫持。

AI Predicted 7.5 Difficulty: Moderate EPSS 1.61% · P75

Public Exploits 1

Metasploit · 1 amlibweb_webquerydll_app.rb [exploit]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2010-20112

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Amlibweb NetOpacs webquery.dll Stack Buffer Overflow
Source: CVE Program / CVE List V5
Vulnerability Description
Amlib’s NetOpacs webquery.dll contains a stack-based buffer overflow vulnerability triggered by improper handling of HTTP GET parameters. Specifically, the application fails to enforce bounds on input supplied to the app parameter, allowing excessive data to overwrite memory structures including the Structured Exception Handler (SEH). Additionally, malformed parameter names followed by an equals sign may result in unintended control flow behavior. This vulnerability is exposed through IIS and affects legacy Windows deployments
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5
Vulnerability Title
Amlib NetOpacs 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Amlib NetOpacs是英国Amlib公司的一个图书馆管理系统中的目录模块。 Amlib NetOpacs存在安全漏洞，该漏洞源于未限制HTTP GET参数输入长度，可能导致栈缓冲区溢出和控制流劫持。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Amlib Amlibweb Library Management System * -

II. Public POCs for CVE-2010-20112

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2010-20112

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same weakness: CWE-121

V. Comments for CVE-2010-20112

No comments yet

Leave a comment