Security Advisory
CVE-2012-4570
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.