CVE-2009-3326

CMScontrol Content Management System 7.x is affected by an SQL injection in index.php via the id_menu parameter (remote attacker could execute arbitrary SQL). Root cause is an injection in the query path documented across CVE sources. No remediation or patch details are provided in the connected ...