CVE-2010-1051

Multiple SQL injection vulnerabilities in index.php in AudiStat 1.3 allow remote attackers to execute arbitrary SQL commands via the 1 year and 2 month parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-1051

CVE-2010-1051 affects AudiStat 1.3 and describes multiple SQL injection vulnerabilities in index.php exploitable via the year and month parameters, enabling remote execution of arbitrary SQL. The CVSSv2 base score is 7.5 (HIGH) with network attack vector and no authentication. Public details are ...