Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities

Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities. Remote attackers can compromise web-application or web-server dbms by injecting own sql commands via GET method request to various parameters like websiteID, imageID, keywords, orderBy, order and articleID in the index.php file. Additionally, a client-side post inject web vulnerability is detected via POST method in the vulnerable 'page' parameter of the index.php file