CVE-2010-5029

Name of the Vulnerable Software and Affected Versions Ecomat CMS version 5.0

Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the show parameter in a web action in the index.php file.

Recommendations For Ecomat CMS version 5.0, update the index.php file to properly sanitize the show parameter to prevent SQL injection attacks. As a temporary workaround, consider restricting access to the index.php file until a patch is available.