CVE-2010-2462

CVE-2010-2462 describes a SQL injection in withdraw_money.php of the OroHYIP project from Toma Cero, exploitable by remote attackers via the id parameter in a cancel action to run arbitrary SQL commands. Public references (NVD entry and mirrored records) confirm the vulnerability and impact as ar...

CVE-2010-2462

creationtimestamp| type| source ---|---|--- 2010-06-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13948...