cve/2010/CVE-2010-4908.md

CVE-2010-4908

Description

SQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the prodid parameter.

POC

Reference

• http://packetstormsecurity.org/0908-exploits/vsm-sql.txt
• http://securityreason.com/securityalert/8443

Github

No PoCs found on GitHub currently.