This host is running CMSQlite and is prone to multiple SQL injection and directory traversal vulnerabilities.

Successful exploitation will allow attackers to execute SQL commands and arbitrary local files. Impact Level: Application.

Upgrade to CMSQlite 1.3 later, For updates refer to http://www.cmsqlite.net/

The flaws are due to, - Improper validation of user supplied input to 'c' parameter in 'index.php', allows attackers to execute SQL commands. - Improper validation of user supplied input to 'mod' parameter in 'index.php', allows attackers to include and execute local files.

CMSQlite version 1.2 and prior.

• http://php-security.org/2010/05/15/mops-2010-029-cmsqlite-c-parameter-sql-injection-vulnerability/index.html
• http://php-security.org/2010/05/15/mops-2010-030-cmsqlite-mod-parameter-local-file-inclusion-vulnerability/index.html

---

Updated on 2015-03-25