Software Vulnerability
Main
Science
Security
Software Alerts
Technology
Webmaster Tools
Thu, 11 Mar 10
onecms
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-0952
SQL injection vulnerability in index.php in OneCMS 2.5, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an elite action.