Cpe:2.3:a:code-Projects:content_management_system:1.0:*:*:*:*:*:*:*

A SQL injection vulnerability in the user_name parameter of the login.php file in code-projects Content Management System 1.0 allows for remote, unauthenticated command execution.