CVE-2010-0720

CVE-2010-0720 describes an SQL injection in Erotik Auktionshaus's news.php where the vulnerable input is the id parameter. Remote attackers can cause arbitrary SQL commands to be executed. Affected component: news.php (.ID parameter). Root cause: improper input handling in the id parameter. Impac...