============ { Ariko-Security - Advisory #3/2/2010 } =============
SQL injection vulnerability in Amelia CMS
Vendor's Description of Software:
Dork:
Application Info:
Vulnerability Info:
Fix:
Time Table
Input passed via the "page" parameter to index.php is not properly
sanitised before being used in a SQL query and it is possible to get
sensitive information using for example Time-Base Blind SQL Injection
attacks.
Solution:
Vulnerability:
Credit:
Advisory:
#http://www.ariko-security.com/feb2010/ad453.html