CVE-2010-2853

SQL injection vulnerability in flashPlayer/playVideo.php in iScripts VisualCaster allows remote attackers to execute arbitrary SQL commands via the productid parameter...

Sql injection

SQL injection vulnerability in flashPlayer/playVideo.php in iScripts VisualCaster allows remote attackers to execute arbitrary SQL commands via the productid parameter...

CVE-2010-2853

CVE-2010-2853 : SQL injection in iScripts VisualCaster, in flashPlayer/playVideo.php via the product_id parameter, enabling remote arbitrary SQL execution. Affected: VisualCaster component; root cause is improper input handling leading to SQL injection. CVSSv2 base score 7.5 (HIGH): Network acces...