CVE-2011-5039

Infoproject Biznis Heroj is affected by multiple SQL injection vulnerabilities. The issues allow remote attackers to inject SQL via (1) login.php parameters username and password, (2) filter parameter to widget.dokumenti_lista.php, and (4) fin_nalog_id parameter to nalozi_naslov.php. Root cause i...