Katalog Stron · Katalog Stron Hurricane · CVE-2010-0677
**Name of the Vulnerable Software and Affected Versions**
Katalog Stron Hurricane versions 1.3.5 and earlier
**Description**
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `get` parameter in the index.php file.
**Recommendations**
For versions 1.3.5 and earlier, update to a version that fixes this issue, if available. As a temporary workaround, consider restricting access to the index.php file to minimize the risk of exploitation. Avoid using the `get` parameter in the index.php file until the issue is resolved.