CVE-2010-1049

CVE-2010-1049 affects the Uiga Business Portal. The issue is multiple SQL injection vulnerabilities in the web application, exploitable via (1) the noentryid parameter to blog/index.php and (2) the p parameter to index2.php. This allows remote attackers to execute arbitrary SQL commands. The vuln...