CVE-2012-5348

CVE-2012-5348 affects MangosWeb Enhanced 3.0.3. The vulnerability is an SQL injection in the login parameter of the login action to index.php, allowing remote execution of arbitrary SQL. It is network-exposed with no authentication and no user interaction required, with a CVSS base score of 6.8 (...

CVE-2012-5348

SQL injection vulnerability in MangosWeb Enhanced 3.0.3 allows remote attackers to execute arbitrary SQL commands via the login parameter in a login action to index.php...