Sql injection

SQL injection vulnerability in sqrlverify.php in php-sqrl allows remote attackers to execute arbitrary SQL commands via the message parameter...

CVE-2014-5458

CVE-2014-5458 describes a SQL injection in the PHP project php-sqrl, specifically in sqrl_verify.php, where the message parameter can be manipulated to execute arbitrary SQL commands. This is a remote-exploit concern affecting the affected code path in php-sqrl. The connected documents confirm th...