CVE-2010-2855

CVE-2010-2855 affects Event Horizon (EVH) 1.1.10 via the vulnerable script modfile.php, enabling SQL injection when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject arbitrary SQL through the YourEmail and VerificationNumber parameters, potentially leading to data ...