Sql injection

Multiple SQL injection vulnerabilities in Cubic CMS 5.1.1, 5.1.2, and 5.2 allow remote attackers to execute arbitrary SQL commands via the 1 resourceid or 2 versionid parameter to recursos/agent.php or 3 login or 4 pass parameter to login.usuario...

PT-2014-4261

Name of the Vulnerable Software and Affected Versions Cubic CMS versions 5.1.1 through 5.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the resource id or version id parameter to the "recursos/agent.php" endpoint, or the login or pass...

CVE-2014-1619: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Cubic CMS 5.1.1, 5.1.2, and 5.2 allow remote attackers to execute arbitrary SQL commands via the 1 resourceid or 2 versionid parameter to recursos/agent.php or 3 login or 4 pass parameter to login.usuario...

Cubic CMS SQL Injection / LFI / Path Disclosure Vulnerabilties

Cubic CMS suffers from local file inclusion, path disclosure, and remote SQL injection vulnerabilities. Cubic CMS SQL Injection / LFI / Path Disclosure I. BACKGROUND ------------------------- "CUBIC CMS" is a non-free content management system for websites and portals of any size, powerful,...