Multiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design (IBD) Micro CMS 3.5 (aka 0.3.5) allow remote malicious users to execute arbitrary SQL commands via (1) the administrators_username parameter (aka the Username field) or (2) the administrators_pass parameter (aka the Password field).
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
impliedbydesign ibd micro cms 3.5 |