CVE-2009-3801

SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmpass aka Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-3801

OpenDocMan 1.2.5 is affected by a SQL injection in index.php triggered through the frmpass parameter, enabling remote attackers to execute arbitrary SQL commands. This is corroborated by multiple sources in the connected set (NVD entry and OpenVAS/Red Hat redundancy). Root cause centers on improp...