CVE-2010-2461

CVE-2010-2461 describes a SQL injection vulnerability in the storecat.php script of JCE-Tech Overstock 1 , exploitable by supplying a crafted value to the store parameter to execute arbitrary SQL. The NVD entry assigns a CVSS v2 base score 7.5 (HIGH) , with network access, no authentication, and ...