NuytsTech Security

CVE-2010-4298

by ·

SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloads_id parameter in a download_now action to index.php.

Date published : 2010-11-26

http://www.securityfocus.com/bid/44998

http://www.securityfocus.com/archive/1/514863/100/0/threaded

Tags: