Sql injection

SQL injection vulnerability in the loadByKey function in the TznDbConnection class in tznmysql.php in Tirzen aka TZN Framework 1.5, as used in TaskFreak! before 0.6.3, allows remote attackers to execute arbitrary SQL commands via the username field in a login action...

CVE-2010-1583

The connected OpenVAS/NASL entry confirms a concrete SQL injection in TaskFreak! 0.6.x using the Tirzen Framework 1.5, affecting the loadByKey() path in TznDbConnection (tzn_mysql.php). The vulnerability is exploitable via the username field in login, permitting unauthenticated remote attackers t...