CVE-2012-6529

CVE-2012-6529 affects Marinet CMS with multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the id parameter to galleryphoto.php or gallery.php, or via the roomid parameter to room.php or room2.php. Root cause: likely unsafe SQL construction in these endp...