CVE-2010-2460

CVE-2010-2460 affects JCE-Tech Shareasale Script (SASS) 1, where the file merchant_product_list.php contains an SQL injection vulnerability exposed via the mechant_id parameter. The root cause is unsanitized input leading to arbitrary SQL execution, enabling remote attackers to manipulate the dat...