PT-2012-2207

Name of the Vulnerable Software and Affected Versions Seotoaster versions 1.9 and earlier Description The issue concerns SQL injection vulnerabilities in the selectUserIdByLoginPass function. Remote attackers can execute arbitrary SQL commands via the login parameter to "sys/login/index" or the...