CVE-2009-3418

CVE-2009-3418 affects Plume CMS 1.2.3 with two SQL injection paths: remote authenticated users via the m parameter in manager/index.php, and remote authenticated administrators via the id parameter in an edit_link action to manager/tools.php. No exploits are detailed in the provided documents; th...