CVE-2010-4958

CVE-2010-4958 affects Prado Portal 1.2.0 via the index.php page parameter "page". The NVD entry specifies an SQL injection that lets remote attackers execute arbitrary SQL commands through the vulnerable parameter. HTBridge’s advisory also documents a Cross‑Site Scripting (XSS) possibility stemmi...