CVE-2010-2462

CVE-2010-2462 describes a SQL injection in withdraw_money.php of the OroHYIP project from Toma Cero, exploitable by remote attackers via the id parameter in a cancel action to run arbitrary SQL commands. Public references (NVD entry and mirrored records) confirm the vulnerability and impact as ar...