CVE-2010-1744

CVE-2010-1744 concerns a SQL injection in product.html of B2B Gold Script, exploitable via the id parameter. Affected component is the web application’s product page (product.html) where unsanitized input in id is used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. T...