Product
A SQL injection vulnerability in the user_name parameter of the login.php file in code-projects Content Management System 1.0 allows for remote, unauthenticated command execution.