CVE-2006-0491

CVE-2006-0491 describes an SQL injection in SZUserMgnt.class.php of SZUserMgnt 1.4, allowing remote attackers to execute arbitrary SQL via the username parameter. The vulnerability arises from improper handling of user input in the login-related component, enabling PII/data exposure or broader da...

CVE-2006-0491

SQL injection vulnerability in SZUserMgnt.class.php in SZUserMgnt 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter...