CVE-2010-4967

Description

SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL commands via the artID parameter.

Affected products

• atcom / netvolution2.5.6 – 2.5.6

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/59343
• MISChttp://osvdb.org/65411
• MISChttp://www.securityfocus.com/bid/40764
• EXPLOIThttp://www.exploit-db.com/exploits/13815
• VENDOR_ADVISORYhttp://secunia.com/advisories/40152