CVE-2009-2164

Multiple SQL injection vulnerabilities in Kjtechforce mailman beta1, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the code parameter to activate.php or 2 the dest parameter to index.php...

CVE-2009-2164

CVE-2009-2164 describes SQL injection vulnerabilities in Kjtechforce Mailman beta1, exploitable when magic_quotes_gpc is disabled. The issues allow remote attackers to execute arbitrary SQL via (1) the code parameter in activate.php or (2) the dest parameter in index.php. Affected component is th...