CVE-2011-5230

Seotoaster 1.9 and earlier is affected by SQL injection in the LoginModel::selectUserIdByLoginPass function. The vulnerabilities allow remote attackers to execute arbitrary SQL commands via (1) the login parameter to sys/login/index or (2) the memberLoginName parameter to sys/login/member. Affect...