CVE-2006-1238

2006-03-15T11:06:00
ID CVE-2006-1238
Type cve
Reporter NVD
Modified 2018-10-18T12:31:36

Description

SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/index.php.