CVE-2010-4609 Information

Description

SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL commands via the nuser parameter in a registrate action.

Reference

http://secunia.com/advisories/42664 http://www.exploit-db.com/exploits/15800 http://www.htbridge.ch/advisory/sql_injection_in_html_edit_cms.html