Sql injection

Multiple SQL injection vulnerabilities in Cubic CMS 5.1.1, 5.1.2, and 5.2 allow remote attackers to execute arbitrary SQL commands via the 1 resourceid or 2 versionid parameter to recursos/agent.php or 3 login or 4 pass parameter to login.usuario...

CVE-2014-1619: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Cubic CMS 5.1.1, 5.1.2, and 5.2 allow remote attackers to execute arbitrary SQL commands via the 1 resourceid or 2 versionid parameter to recursos/agent.php or 3 login or 4 pass parameter to login.usuario...

PT-2014-4261

Name of the Vulnerable Software and Affected Versions Cubic CMS versions 5.1.1 through 5.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the resource id or version id parameter to the "recursos/agent.php" endpoint, or the login or pass...