Multiple SQL injection vulnerabilities in CMScore allow remote malicious users to execute arbitrary SQL commands via the (1) EntryID or (2) searchterm parameter to index.php, or (3) username parameter to authenticate.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
chipmunk scripts cmscore |