SQL injection vulnerability in index.php in TomatoCMS prior to 2.0.5 allows remote malicious users to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATH_INFO.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
tomatocms tomatocms |
||
tomatocms tomatocms 2.0.3.1622 |
||
tomatocms tomatocms 2.0.3.1430 |
||
tomatocms tomatocms 2.0.3 |
||
tomatocms tomatocms 2.0.2 |
||
tomatocms tomatocms 2.0.1 |
||
tomatocms tomatocms 2.0.0 |