Sql injection

SQL injection vulnerability in sqrlverify.php in php-sqrl allows remote attackers to execute arbitrary SQL commands via the message parameter...

CVE-2014-5458

CVE-2014-5458 describes a SQL injection in the PHP project php-sqrl, specifically in sqrl_verify.php, where the message parameter can be manipulated to execute arbitrary SQL commands. This is a remote-exploit concern affecting the affected code path in php-sqrl. The connected documents confirm th...

PT-2014-6488

Name of the Vulnerable Software and Affected Versions php-sqrl affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the message parameter in the sqrl verify.php file. Recommendations At the moment, there is no...

CVE-2014-5458: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in sqrlverify.php in php-sqrl allows remote attackers to execute arbitrary SQL commands via the message parameter...