CVE-2010-4855

The CVE-2010-4855 entry describes a SQL injection in Oku.asp of xWeblog 2.2, exploitable via the makale_id parameter. The underlying issue is an injectable input vector that allows remote attackers to execute arbitrary SQL commands. Affected software is xWeblog 2.2 (Oku.asp); no specific vendor v...