CVE-2010-4859

The CVE-2010-4859 entry describes a SQL injection in WebAsyst Shop-Script’s index.php, exploitable via the blog_id parameter in a news action. Remote attackers could execute arbitrary SQL commands. Documents identify the affected software and the underlying vulnerability type, but no specific rem...