CVE-2010-2459

CVE-2010-2459 describes an SQL injection in the file video.php of the product 2daybiz Video Community Portal Script 1.0 . The vulnerability is triggered via the videoid parameter, allowing remote attackers to execute arbitrary SQL commands. According to NVD, the CVSS v2 vector is AV:N/AC:L/Au:N/C...