CVE-2011-5230

Multiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoastercore/application/models/LoginModel.php in Seotoaster 1.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 login parameter to sys/login/index or 2 memberLoginName parameter to...

CVE-2011-5230

Seotoaster 1.9 and earlier is affected by SQL injection in the LoginModel::selectUserIdByLoginPass function. The vulnerabilities allow remote attackers to execute arbitrary SQL commands via (1) the login parameter to sys/login/index or (2) the memberLoginName parameter to sys/login/member. Affect...