ttCMS/ttForum multiple bugs

SQL injection via username in Profile.php. PHP injection in News.php, install.php...

ttCMS 2.2 Multiple Vulnerabilities

The remote server is running a version of ttCMS that is prone to code injection as well as SQL injection attacks. An attacker may use these flaws to execute arbitrary PHP code on this host or to take the control of the remote database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...