CVE-2013-3050

The CVE-2013-3050 entry concerns a SQL injection vulnerability in ZAPms 1.41 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands via the pid parameter to product, indicating an injection fault in input handling. The NVD data cites a CVSSv2 base score of 7.5 (HIGH), wit...