description: SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passwordreset&token" parameter.
problem types: SQL Injection
affected:
{
product: Yeager CMS
vendor: n/a
versions:
status: affected, version: 1.2.1
}