Description
SQL injection vulnerability in index.php in toendaCMS 0.6.2.1, when configured to use a SQL database, allows remote attackers to execute arbitrary SQL commands via the id parameter.
References
- 21768 vdb-entry
- 18058 third-party-advisory
- ADV-2005-2926 vdb-entry