CVE-2009-2164

CVE-2009-2164 describes SQL injection vulnerabilities in Kjtechforce Mailman beta1, exploitable when magic_quotes_gpc is disabled. The issues allow remote attackers to execute arbitrary SQL via (1) the code parameter in activate.php or (2) the dest parameter in index.php. Affected component is th...

CVE-2009-2164

Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the code parameter to activate.php or 2 the dest parameter to index.php...