CVE-2010-5000

SQL injection vulnerability in login/loginindex.php in MCLogin System 1.1 and 1.2 allows remote attackers to execute arbitrary SQL commands via the myusername parameter aka Username field in a dologin action. NOTE: some of these details are obtained from third party information...

CVE-2010-5000

CVE-2010-5000 affects MCLogin System 1.1 and 1.2, where a SQL injection in login/login_index.php allows remote attackers to execute arbitrary SQL via the myusername parameter in the do_login action. The vulnerability is caused by improper input handling in the login routine, enabling manipulation...