TI-2010-04677 CVE-2010-4954 · GHSA-7p42-q79x-fm9gSQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows…Priority LOW 35SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands via the products_id parameter.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.00986 · Published 2011-10-09 · No fix listed CWE-89