Description FlameCMS 3.3.5 has SQL injection in account/login.php via accountName. References http://www.iwantacve.cn/index.php/archives/317/