CVE-2010-4770

CVE-2010-4770 is a SQL injection vulnerability in the CommodityRentals DVD Rentals Script, exposed via index.php in the catalog action. The issue allows remote attackers to execute arbitrary SQL commands through the cat_id parameter. Documents confirm the affected software component is the script...