CVE-2010-4770

CVE-2010-4770 describes a SQL injection vulnerability in the index.php file of CommodityRentals DVD Rentals Script, allowing remote attackers to execute arbitrary SQL commands through the cat_id parameter in a catalog action. This vulnerability has a CVSS score of 7.5 (High), indicating a critical risk due to its network-based attack vector, low access complexity, and potential for partial compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, public exploit code exists on ExploitDB, suggesting potential for exploitation, though there is no evidence of active widespread exploitation or significant community discussion.