CVE-2006-3402

CVE-2006-3402 describes a SQL injection vulnerability in VirtuaStore 2.0 that allows remote attackers to execute arbitrary SQL commands via the password parameter during login. The issue affects VirtuaStore 2.0 and is caused by improper handling of input in the login flow, enabling an attacker to...