CVE-2010-1270

CVE-2010-1270 describes a SQL injection vulnerability in auktion.php of Multi Auktions Komplett System 2. The vulnerability allows remote attackers to execute arbitrary SQL commands by supplying a crafted id_auk parameter. Impact stated in the document set is risk of partial confidentiality/integ...