Etomite CMS Multiple Input Validation Vulnerabilities

Etomite CMS is prone to multiple input-validation vulnerabilities, including a local file-include vulnerability and an SQL-injection issue, because the application fails to sufficiently sanitize user-supplied input.

Exploiting these issues may allow an attacker to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database implementations, or execute local scripts on the affected webserver.

Version 0.6.1.2 is vulnerable to this issue; other versions may also be affected.


 

Privacy Statement
Copyright 2010, SecurityFocus