CVE-2006-2268

The CVE-2006-2268 entry describes a SQL injection in FlexCustomer 0.0.4 and earlier that allows remote attackers to bypass authentication and run arbitrary SQL via the admin/index.php and index.php interfaces, likely involving the checkuser/checkpass and username/password parameters. It also note...