CVE-2009-4872

Multiple SQL injection vulnerabilities in globepersonnellogin.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2009-4872

CVE-2009-4872 affects Logoshows BBS 2.0, specifically globepersonnel_login.asp. The vulnerability is multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL via the username or password fields. The connected records confirm the affected component/file and the underlying ...