CVE-2010-4737

The CVE-2010-4737 entries describe a SQL injection in HotWebScripts HotWeb Rentals, exploitable via the PropResort parameter in resorts.asp. The root cause is unsanitized user input passed to a SQL query, enabling remote command execution/data access as stated across NVD and CVE records. No explo...