E-Annu includes/menu.inc.php login Variable SQL Injection

2006-10-30T10:48:48
ID OSVDB:30152
Type osvdb
Reporter OSVDB
Modified 2006-10-30T10:48:48

Description

Technical Description

This vulnerability is only present when the magic_quotes_gpc PHP option is 'off'.

References:

Secunia Advisory ID:22631 ISS X-Force ID: 29901 Generic Exploit URL: http://milw0rm.com/exploits/2687 FrSIRT Advisory: ADV-2006-4279 CVE-2006-5666 Bugtraq ID: 20815