Security Advisory
CVE-2006-5017
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in admin/all_users.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to execute arbitrary SQL commands via the from parameter.