Sql injection

Multiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoastercore/application/models/LoginModel.php in Seotoaster 1.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 login parameter to sys/login/index or 2 memberLoginName parameter to...