CVE-2010-2511

Description

SQL injection vulnerability in viewnews.php in 2daybiz Multi Level Marketing (MLM) Software allows remote attackers to execute arbitrary SQL commands via the nwsid parameter.

Affected products

• 2daybiz / multi_level_marketing_software

References

• EXPLOIThttp://www.exploit-db.com/exploits/14005
• VENDOR_ADVISORYhttp://secunia.com/advisories/40340
• MISChttp://www.securityfocus.com/bid/41097