CVE-2010-4362

CVE-2010-4362 affects MicroNetsoft RV Dealer Website. The vulnerability is multiple SQL injection flaws allowing remote attackers to inject arbitrary SQL via the selStock parameter in search.asp and the orderBy parameter in showAlllistings.asp. Root cause attributed to improper handling of user-s...