CVE-2010-2510

Description

SQL injection vulnerability in customize.php in 2daybiz Web Template Software allows remote attackers to execute arbitrary SQL commands via the tid parameter.

Affected products

• 2daybiz / web_template_software

References

• VENDOR_ADVISORYhttp://secunia.com/advisories/40348
• EXPLOIThttp://www.exploit-db.com/exploits/14020