SQL injection vulnerability in the News module in Envolution allows remote malicious users to execute arbitrary SQL commands via the (1) startrow and (2) catid parameter.
source: wwwsecurityfocuscom/bid/15857/info
Envolution is prone to multiple input validation vulnerabilities
Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication credentials They may also permit an attacker to expl ...
Vulmon