CVE-2009-4561

Multiple SQL injection vulnerabilities in Admin/index.php in WebLeague 2.2.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-4561

CVE-2009-4561 affects WebLeague 2.2.0 (Admin/index.php). The vulnerability consists of multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters when magic_quotes_gpc is disabled. The NVD entry documents a CVSS v2 b...