CVE-2010-2922

CVE-2010-2922 describes an SQL injection in AKY Blog’s default.asp, exploitable via the id parameter to trigger remote execution of arbitrary SQL. Affected component: AKY Blog default.asp; root cause: unsafeguarded input being interpolated into SQL; impact: partial confidentiality, integrity, and...