CVE-2011-0644

CVE-2011-0644 describes a SQL injection vulnerability in PHPCMS 2008 V2, specifically in the include/admin/model_field.class.php file. The issue can be exploited via the modelid parameter to flash_upload.php, enabling remote attackers to execute arbitrary SQL commands. Connected sources (NVD/NIST...