CVE-2006-1238

2006-03-15T11:06:00
ID CVE-2006-1238
Type cve
Reporter NVD
Modified 2017-07-19T21:30:25

Description

SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/index.php.