TI-2006-05302 CVE-2006-5491 · GHSA-2xm8-qf48-2c34Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote…Priority LOW 35Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01192 · Published 2006-10-25 · No fix listed
