2 matches found
CVE-2010-0457
The CVE-2010-0457 entry describes an SQL injection in the Magic-Portal 2.1 application, specifically in home.php where the id parameter is unsafely used in SQL queries. Root cause: lack of input sanitization/parameterization for id, enabling remote attackers to execute arbitrary SQL commands. Imp...
CVE-2010-0457
creationtimestamp| type| source ---|---|--- 2010-01-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11235...