SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATH_INFO.
Max CVSS
7.5
EPSS Score
0.23%
Published
2010-05-20
Updated
2018-10-10
1 vulnerabilities found