CVE-2010-4920

CVE-2010-4920: SQL injection in Micronetsoft Rental Property Management Website 1.0 (detail.asp) via the ad_ID parameter allows remote attackers to execute arbitrary SQL commands. Root cause: unsanitized ad_ID input enabling injection. Impact (per CVSS2): partial confidentiality, integrity, and a...