CVE-2009-0394

SQL injection vulnerability in login.php in Pre Lecture Exercises PLEs CMS 1.0 beta 4.2 allows remote attackers to execute arbitrary SQL commands via the school parameter...

CVE-2009-0394

The CVE-2009-0394 entry describes a SQL injection vulnerability in the login.php of Pre Lecture Exercises (PLEs) CMS 1.0 beta 4.2 . An attacker can exploit the vulnerability by supplying a crafted value to the school parameter , potentially allowing remote execution of arbitrary SQL commands. The...