CVE-2010-4922

Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to 1 contentAE.asp or 2 templatesAE.asp...

PT-2011-1857

Name of the Vulnerable Software and Affected Versions Allinta CMS version 22.07.2010 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting SQL injection vulnerabilities via the i parameter in an edit action to API endpoints such as...

CVE-2010-4922: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to 1 contentAE.asp or 2 templatesAE.asp...

SQL injection vulnerability in allinta CMS

Vulnerability ID: HTB22530 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinallintacms.html Product: Allinta CMS Vendor: Allinta http://www.allinta.com/ Vulnerable Version: Current at 22.07.2010 and Probably Prior Versions Vendor Notification: 26 July 2010 Vulnerability Type:...