CVE-2012-1673

The CVE-2012-1673 issue affects the e-ticketing product, specifically the loginscript.php component, where both the user_name and password POST parameters can be used to perform SQL injection. The root cause is improper handling of input that allows remote attackers to execute arbitrary SQL comma...