CVE-2010-4776

CVE-2010-4776 describes an SQL injection in takefreestart.php of PreProjects Pre Online Tests Generator Pro, exploitable via the tid2 parameter to execute arbitrary SQL. Reported in NVD with CVSSv2 base score 7.5 (HIGH); affected component is the PHP script takefreestart.php, URL-controlled input...