Security Advisory
CVE-2010-4796
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) provinceid parameter to search.php and the (2) e parameter to resumeview.php.