[eVuln] qliteNews SQL Injection Vulnerability

New eVuln Advisory: qliteNews SQL Injection Vulnerability http://evuln.com/vulns/114/summary.html --------------------Summary---------------- eVuln ID: EV0114 CVE: CVE-2006-1571 Vendor: r2xDesign.net Vendor's Web Site: http://www.r2xdesign.net/ Software: qliteNews Versions: 2005.07.01 Critical...

CVE-2006-1571

Multiple SQL injection vulnerabilities in loginprocess.php in qliteNews 2005.07.01 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...

Sql injection

Multiple SQL injection vulnerabilities in loginprocess.php in qliteNews 2005.07.01 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...

CVE-2006-1571

qliteNews (v2005.07.01) is affected by SQL injection in loginprocess.php via (1) username or (2) password parameters. This allows remote attackers to run arbitrary SQL commands, potentially bypassing authentication. No patch is available per eVuln/SECURITYVULNS entries; monitor for updates.

CVE-2006-1571

Multiple SQL injection vulnerabilities in loginprocess.php in qliteNews 2005.07.01 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...