CVE-2010-4912

CVE-2010-4912 affects UCenter Home 2.0. The vulnerability is a SQL injection in the shop.php file, exploitable via the shopid parameter in a view action, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a base score of 7.5 (HIGH) with network attack vector and low ...