PHP Support Tickets index.php Multiple Parameter SQL Injection

The remote host is running PHP Support Tickets, an open source support ticketing system written in PHP. The installed version of PHP Support Tickets does not validate input to the 'username' or 'password' parameters of the 'index.php' script before using it in a database query. An attacker may be...