Task Freak 'loadByKey()' SQL Injection Vulnerability

This host is running Task Freak and is prone SQL Injection Vulnerability. OpenVAS Vulnerability Test $Id: secpodtaskfreaksqlinjvuln.nasl 5838 2017-04-03 10:26:36Z cfi $ Task Freak 'loadByKey' SQL Injection Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod, http://www.secpod.com...

CVE-2010-1583: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the loadByKey function in the TznDbConnection class in tznmysql.php in Tirzen aka TZN Framework 1.5, as used in TaskFreak! before 0.6.3, allows remote attackers to execute arbitrary SQL commands via the username field in a login action...