Vulnerabilities > Gambio > XT

DATE	CVE	VULNERABILITY TITLE	RISK
2011-10-09	CVE-2010-4954	SQL Injection vulnerability in Gambio Xt:Commerce Gambio 2008 SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands via the products_id parameter. network low complexity gambio CWE-89	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.