CVE-2010-4959

CVE-2010-4959 describes an SQL injection vulnerability in the login feature of Pre Projects Pre Podcast Portal. The root cause is unsafely constructed SQL in the password parameter, enabling remote attackers to inject arbitrary SQL commands. Documents consistently identify the affected component ...