CVE-2009-0542

SQL injection vulnerability in ProFTPD Server 1.3.1 through 1.3.2rc2 allows remote attackers to execute arbitrary SQL commands via a "%" percent character in the username, which introduces a "'" single quote character during variable substitution by modsql...

The Cult of a Cardinal Number

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------ The Cult of a Cardinal Number Equal to the Sum of 1+1 by Phantasmal Phantasmagoria [email protected] - ---- Table of Contents ------------- 1 - Introduction 2 - Technical Details 3 - Final Thoughts - ----...