CVE-2009-4414

CVE-2009-4414 concerns phpGroupWare. The vulnerability is an SQL injection in the authentication path: phpGroupWare’s phpgwapi/inc/class.auth_sql.inc.php allows remote attackers to execute arbitrary SQL via the passwd parameter on login.php, typically when magic_quotes_gpc is disabled. Affected v...