Speck CMS SQL Injection

Author: Jason Whelan PacketStorm: exploitdev Email: [email protected] Target Software: Speck CMS Framework, Latest Vendor URL: http://www.speckcms.org/ Multiple SQL Injection Vulnerabilities Examples: portal/user.cfm: SELECT FROM spUsers WHERE username = 'url.username' portal/group.cfm: SELEC...