PT-2014-8569

Name of the Vulnerable Software and Affected Versions Etiko CMS affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the page id parameter to "loja/index.php" or the article id parameter to "index.php"...

PT-2014-8568

Name of the Vulnerable Software and Affected Versions Etiko CMS affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the vulnerabilities...

CVE-2014-8506: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Etiko CMS allow remote attackers to execute arbitrary SQL commands via the 1 pageid parameter to loja/index.php or 2 articleid parameter to index.php...

CVE-2014-8505: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Etiko CMS allow remote attackers to inject arbitrary web script or HTML via the 1 pageid parameter to loja/index.php or 2 articleid parameter to index.php...