PT-2012-2207

Name of the Vulnerable Software and Affected Versions Seotoaster versions 1.9 and earlier Description The issue concerns SQL injection vulnerabilities in the selectUserIdByLoginPass function. Remote attackers can execute arbitrary SQL commands via the login parameter to "sys/login/index" or the...

CVE-2011-5230: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoastercore/application/models/LoginModel.php in Seotoaster 1.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 login parameter to sys/login/index or 2 memberLoginName parameter to...