EUVD-2014-1694

Malware in sbrugna...

CVE-2014-1619: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Cubic CMS 5.1.1, 5.1.2, and 5.2 allow remote attackers to execute arbitrary SQL commands via the 1 resourceid or 2 versionid parameter to recursos/agent.php or 3 login or 4 pass parameter to login.usuario...