CVE-2006-1571

qliteNews (v2005.07.01) is affected by SQL injection in loginprocess.php via (1) username or (2) password parameters. This allows remote attackers to run arbitrary SQL commands, potentially bypassing authentication. No patch is available per eVuln/SECURITYVULNS entries; monitor for updates.