CVE-2009-0738

CVE-2009-0738 describes an SQL injection vulnerability in login.php of Auth Php 1.0, exploitable via the username and passwd parameters. The root cause is unsafely constructed SQL in the login flow that allows attackers to alter SQL semantics or execute arbitrary commands. The vulnerability affec...

CVE-2009-0738

SQL injection vulnerability in login.php in Auth Php 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 passwd parameters...