SQL injection vulnerability in index.php in Bartels Schoene ConPresso before 4.0.5a allows remote attackers to execute arbitrary SQL commands via the nr parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Conpresso_cms | Conpresso | * | 4.0.4a (including) |