3 matches found
Sql injection
SQL injection vulnerability in admin.php in Libera CMS 1.12, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffuser cookie parameter, a different vector than CVE-2008-4700. NOTE: the provenance of this information is unknown; the details...
CVE-2008-4700
SQL injection vulnerability in admin.php in Libera CMS 1.12 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the liberastaffpass cookie parameter...