This host is running Irokez CMS and is prone SQL injection vulnerability.

Successful exploitation will allow attacker to access or modify data, or exploit latent vulnerabilities in the underlying database. Impact Level: Application.

Upgrade to version 0.8b or later, For updates refer to http://www.irokez.org/download/cms

The flaw is caused by an input validation error in the 'select()' function when processing the 'id' parameter, which could be exploited by malicious people to conduct SQL injection attacks.

Irokez CMS version 0.7.1 and prior

• http://secunia.com/advisories/23497
• http://www.vupen.com/english/advisories/2009/2167

---

Updated on 2015-03-25