CVE-2008-2921

EZCMS 1.2 and earlier (EZTechhelp EZCMS) contain an SQL injection in index.php via the page parameter, allowing remote attackers to execute arbitrary SQL commands. Root cause: improper validation of the page parameter. Impact per sources includes potential compromise of data integrity and confide...