CVE-2008-6241

CVE-2008-6241 affects FlexPHPSite versions 0.0.1 and 0.0.7. It describes SQL injection in admin/usercheck.php when magic_quotes_gpc is disabled, allowing remote attackers to modify or exfiltrate data via the checkuser (username) or checkpass (password) fields directed to admin/index.php. The NVD ...