CVE-2010-4500

CVE-2010-4500 describes multiple SQL injection vulnerabilities in contact.php of MRCGIGUY FreeTicket 1.0.0, specifically when magic_quotes_gpc is disabled. Attackers can exploit this by injecting arbitrary SQL commands through the name, email, subject, and message parameters during a sendmess action. This vulnerability carries a CVSS score of 6.8, indicating a medium severity risk with potential for partial compromise of confidentiality, integrity, and availability, requiring medium attack complexity over a network. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.