CVE-2010-2853

CVE-2010-2853 : SQL injection in iScripts VisualCaster, in flashPlayer/playVideo.php via the product_id parameter, enabling remote arbitrary SQL execution. Affected: VisualCaster component; root cause is improper input handling leading to SQL injection. CVSSv2 base score 7.5 (HIGH): Network acces...