hamid-network-security-team

1 exploit Active since Feb 2006
CVE-2006-0721 EXPLOITDB text WORKING POC
RunCMS 1.2 and 1.3a - SQL Injection via pmlite.php to_userid Parameter
SQL injection vulnerability in pmlite.php in RunCMS 1.2 and 1.3a allows remote attackers to execute arbitrary SQL commands via the to_userid parameter.