Description
Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.
References
- 20061019 UltraCMS 0.9 sql injection mailing-list
- 1017096 vdb-entry
- 20642 vdb-entry
- 1768 third-party-advisory
- ultracms-password-sql-injection(29686) vdb-entry