SQL injection vulnerability in Construtiva CIS Manager allows remote attackers to execute arbitrary SQL commands via the email parameter to autenticar/lembrarlogin.asp.Referenceshttp://www.securityfocus.com/bid/67442http://www.securityfocus.com/archive/1/532155/100/0/threadedhttp://seclists.org/fulldisclosure/2014/May/73