CVE-2010-1599

The CVE-2010-1599 issue is a SQL injection in NKInFoWeb loadorder.php, affecting NKInFoWeb 2.5 and 5.2.2.0 via the id_sp parameter. Remote attackers could potentially execute arbitrary SQL commands through this parameter. The NVD entry lists a base score of 7.5 (High) with network attack vector a...