CVE-2006-5491: Ceary Ultracms

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.

Affected products

• Ceary Ultracms: version 0.9 only

Published 2006-10-25. Last modified 2026-06-16.