CVE-2009-0646

CVE-2009-0646 affects 4Site CMS 2.6 and earlier. Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands via parameters in several endpoints: pcgi/4site.pl (login, password), print/print.shtml (page), portfolio/index.shtml (s, i), hotel/index.php (h), news/...