Sql injection

SQL injection vulnerability in users.php in Mihalism Multi Host allows remote attackers to execute arbitrary SQL commands via the username parameter in a lostpasswordgo action...

CVE-2008-0714

CVE-2008-0714 affects Mihalism Multi Host via the vulnerable file users.php in the lost_password_go flow, where the username parameter is susceptible to SQL injection . The underlying issue is improper input handling, enabling remote attackers to execute arbitrary SQL commands. Public references ...