CVE-2010-1046

CVE-2010-1046 affects Rostermain 1.1 and earlier, where multiple SQL injection vulnerabilities exist in index.php. The underlying issue is improper input handling in the (1) userid (username) and (2) password parameters, enabling remote attackers to inject and execute arbitrary SQL commands. The ...