CVE-2010-3076: Improper Neutralization of Special Elements used in an SQL Command

The filter function in php/src/include.php in Simple Management for BIND aka smbind before 0.4.8 does not anchor a certain regular expression, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via the username parameter to the admin login page...

PT-2010-4530

Name of the Vulnerable Software and Affected Versions smbind versions prior to 0.4.8 Description The issue concerns a problem with the filter function in the smbind software, specifically in the php/src/include.php file. This problem allows remote attackers to conduct SQL injection attacks by...