CVE-2009-0452

Multiple SQL injection vulnerabilities in parents/login.php in Online Grades 3.2.4, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 uname or 2 pass parameter...

CVE-2009-0452

The CVE-2009-0452 entry covers multiple SQL injection flaws in Online Grades 3.2.4, specifically in parents/login.php, when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject SQL via the (1) uname or (2) pass parameters. This is caused by insufficient input validati...

CVE-2009-0452

creationtimestamp| type| source ---|---|--- 2009-02-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7956...