PT-2011-2341

Name of the Vulnerable Software and Affected Versions PyWebDAV versions prior to 0.9.4.1 Description The issue allows remote attackers to execute arbitrary SQL commands via the 1 user or 2 pw argument in the get userinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py...