Time-based SQL Injection in Admin panel UliCMS <= v9.8.1

Posted by Manuel Garcia Cardenas on Feb 03

=============================================
MGC ALERT 2016-001
– Original release date: January 26, 2016
– Last revised: February 02, 2016
– Discovered by: Manuel García Cárdenas
– Severity: 7,1/10 (CVSS Base Score)
=============================================

I. VULNERABILITY
————————-
Time-based SQL Injection in Admin panel UliCMS <= v9.8.1

II. BACKGROUND
————————-
UliCMS is a modern web content…