CVE-2009-4351

CVE-2009-4351 affects WSCreator 1.1 (ADMIN/loginaction.php). The underlying issue is an SQL injection vulnerability that arises when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL commands via the Email (username) parameter. This is documented across multiple sou...

CVE-2009-4351

SQL injection vulnerability in ADMIN/loginaction.php in WSCreator 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the Email aka username parameter...

CVE-2009-4351

creationtimestamp| type| source ---|---|--- 2009-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10446...