CVE-2009-0459

CVE-2009-0459 describes multiple SQL injection vulnerabilities in admin/login_submit.php of Whole Hog Password Protect: Enhanced 1.x . The flaws allow remote attackers to execute arbitrary SQL commands via the uid (Username) or pwd (Password) parameters. This is supported by the NVD entry and rel...