CVE-2010-4856

CVE-2010-4856 affects xWeblog 2.2, vulnerable in arsiv.asp via the tarih parameter to allow remote execution of SQL commands. The vulnerability is a SQL injection in the application, enabling partial confidentiality, integrity, and availability impact per the NVD metrics (base score 7.5). Related...