PHPStatus check.php username Variable POST Method SQL Injection

2006-02-04T04:17:51
ID OSVDB:23029
Type osvdb
Reporter OSVDB
Modified 2006-02-04T04:17:51

Description

Technical Description

This vulnerability is only present when the magic_quotes_gpc PHP option is 'off'.

References:

Vendor URL: http://www.hintondesign.org/ Secunia Advisory ID:18791 Related OSVDB ID: 23031 Related OSVDB ID: 23030 Related OSVDB ID: 23032 Other Advisory URL: http://evuln.com/vulns/61/summary.html Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-02/0175.html Keyword: EV0061 FrSIRT Advisory: ADV-2006-0450 CVE-2006-0570