FacilCMS is prone to multiple SQL-injection and information-disclosure vulnerabilities. Exploiting these issues could allow an attacker to obtain sensitive information, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. FacilCMS 0.1RC2 is vulnerable other versions may also be affected.

• http://www.securityfocus.com/bid/34177

---

Updated on 2015-03-25