CVE-2009-1818

CVE-2009-1818 affects MaxCMS 2.0, where the admin/admin_manager.asp component is vulnerable to SQL injection via an m_username cookie in the add action. The underlying flaw allows remote attackers to execute arbitrary SQL commands with the potential to impact data. Public references confirm a wor...