Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) cID parameter to default.asp and the (2) username parameter to main_login2.asp.
| Software | From | Fixed in |
|---|---|---|
| acidcat / acidcat_cms | 3.4.1 | 3.4.1.x |