Full title: Simmeth System GmbH Supplier Manager LFI / SQL Injection / Bypass Vulnerabilities Category: web applications Platform: php Simmeth System GmbH Supplier Manager (Lieferantenmanager) versions prior to 5.6 suffer from authentication bypass, code execution, cross site scripting, information leakage, remote SQL injection, and various other vulnerabilities. # 0day.today @ http://0day.today/