CVE-2010-4847

CVE-2010-4847 affects MH Products MHP Downloadshop. A SQL injection in view_item.php via the ItemID parameter allows remote attackers to execute arbitrary SQL commands. Root cause: lack of input validation in the vulnerable script. Impact: as described, arbitrary SQL execution with affected privi...