CVE-2006-1569

RedCMS 0.1 is affected by multiple SQL injection vulnerabilities. The issues arise from unsanitized user input used in SQL queries for login.php (username/password), register.php (username/password), and profile.php (parameter u). Remote attackers could potentially execute arbitrary SQL commands ...