Sql injection

SQL injection vulnerability in DSLogin 1.0, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $loguserid variable in 1 index.php and 2 admin/index.php...

CVE-2006-1238

CVE-2006-1238 describes an SQL injection vulnerability in DSLogin 1.0 where magic_quotes_gpc is disabled. The affected scripts are (1) index.php and (2) admin/index.php. exploitation via the vulnerable variable is possible to execute arbitrary SQL and bypass authentication through the $log_userid...

CVE-2006-1238

SQL injection vulnerability in DSLogin 1.0, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $loguserid variable in 1 index.php and 2 admin/index.php...