Bit 5 Blog processlogin.php username Parameter SQL Injection - Ver2 (CVE-2006-0320)

An SQL injection vulnerability has been reported in Bit 5 Blog. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2006-0320

CVE-2006-0320 affects Bit 5 Blog 8.01, with vulnerability in admin/processlogin.php that allows an attacker to bypass authentication and execute arbitrary SQL via the (1) username and (2) password parameters. The provided connected documents confirm the affected file and the SQL injection mechani...

CVE-2006-0320

SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 username and 2 password parameter...