CVE-2010-4922

Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to 1 contentAE.asp or 2 templatesAE.asp...

PT-2011-1857

Name of the Vulnerable Software and Affected Versions Allinta CMS version 22.07.2010 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting SQL injection vulnerabilities via the i parameter in an edit action to API endpoints such as...

CVE-2010-4922: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to 1 contentAE.asp or 2 templatesAE.asp...