NuytsTech Security

CVE-2008-1990

by ·

Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) cID parameter to default.asp and the (2) username parameter to main_login2.asp.

Date published : 2008-04-27

http://www.securityfocus.com/bid/28868

http://www.securityfocus.com/archive/1/491129/100/0/threaded

Tags: