SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passwordreset&token" parameter.
SQL injection vulnerability in Yeager CMS
Exploit
CVE-2015-7567
NVD
Refer to CVE-2015-7567 NVD advisory