CVE-2010-4861

CVE-2010-4861 is a SQL injection in webSPELL 4.2.1 affecting the asearch.php script. The vulnerability allows remote attackers to pass the search parameter to trigger arbitrary SQL execution. Documented details indicate a network-accessible issue with no authentication required and partial confid...