CVE

Id
43274  
CVE No.
CVE-2010-0690  
Status
Candidate  
Description
SQL injection vulnerability in index.php in CommodityRentals Video Games Rentals allows remote attackers to execute arbitrary SQL commands via the pfid parameter in a catalog action.  
Phase
Assigned (20100223)  
Votes
None (candidate not yet proposed)  
Comments