CVE-2010-4989

The CVE-2010-4989 entry concerns a SQL injection in the Ziggurat Farsi CMS. Affected component: main.asp; vulnerable parameter: grp. Root cause: unsafely constructed SQL queries allow an attacker to modify/execute arbitrary SQL remotely. Impact is reflected as partial confidentiality, integrity, ...