Security Advisory
CVE-2010-1049
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Multiple SQL injection vulnerabilities in Uiga Business Portal allow remote attackers to execute arbitrary SQL commands via the (1) noentryid parameter to blog/index.php and the (2) p parameter to index2.php.