CVE-2009-1487

CVE-2009-1487 describes an SQL injection vulnerability in FunGamez RC1, specifically in pages/login.php where the login_user parameter (username) allows remote attackers to execute arbitrary SQL commands. Root cause: insufficient input validation on the login_user field. Impact stated: arbitrary ...