SQL injection vulnerability in tienda.php in BlueCUBE CMS allows remote attackers to execute arbitrary SQL commands via the id parameter.
- http://packetstorm.linuxsecurity.com/0809-exploits/bluecube.txt
No PoCs found on GitHub currently.