Description
Multiple SQL injection vulnerabilities in index.php in CMS.R. 5.5 allow remote attackers to execute arbitrary SQL commands via the (1) adminname and (2) adminpass parameters. NOTE: some of these details are obtained from third party information.
References
- ADV-2006-3561 vdb-entry
- cmsr-index-sql-injection(28877) vdb-entry
- 1563 third-party-advisory
- 20060911 CMS.R. the Content Management System admin authentication baypass mailing-list
- 21860 third-party-advisory
- 19950 vdb-entry