NuytsTech Security

CVE-2010-2624

by ·

Multiple SQL injection vulnerabilities in iScripts EasySnaps 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) comment parameter to add_comments.php, (2) values parameter to tags_details.php, or (3) begin parameter to greetings.php.

Date published : 2010-07-02

http://www.securityfocus.com/bid/41298

http://www.securityfocus.com/archive/1/512140/100/0/threaded

Tags: