3 matches found
Sql injection
SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL commands via the username parameter in a lostpasswordgo action...
CVE-2008-0714
CVE-2008-0714 affects Mihalism Multi Host via the vulnerable file users.php in the lost_password_go flow, where the username parameter is susceptible to SQL injection . The underlying issue is improper input handling, enabling remote attackers to execute arbitrary SQL commands. Public references ...
CVE-2008-0714: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL commands via the username parameter in a lostpasswordgo action...