CVE-2011-5183

OrderSys 1.6.4 and earlier is affected by multiple SQL injection vulnerabilities. The root cause is unsafe handling of the where_clause parameter in ordering/interface_creator/ scripts (index.php, index_long.php, index_short.php), allowing remote attackers to inject and execute arbitrary SQL comm...