2 matches found
Sql injection
Multiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoastercore/application/models/LoginModel.php in Seotoaster 1.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 login parameter to sys/login/index or 2 memberLoginName parameter to...
7.5CVSS9.3AI score0.02237EPSS
SaveExploits2References5Affected Software1
CVE-2011-5230: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoastercore/application/models/LoginModel.php in Seotoaster 1.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 login parameter to sys/login/index or 2 memberLoginName parameter to...
7.5CVSS6.4AI score0.02237EPSS
SaveExploits2References2
20