Security Advisory
CVE-2010-4856
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in arsiv.asp in xWeblog 2.2 allows remote attackers to execute arbitrary SQL commands via the tarih parameter.