PT-2013-5300

Name of the Vulnerable Software and Affected Versions Elemata CMS version RC 3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in functions/global.php. Recommendations For Elemata CMS version RC 3.0, avoid using the id...

CVE-2013-4952: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in functions/global.php in Elemata CMS RC 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...