3 matches found
Sql injection
A vulnerability was found in PHP-Login 1.0. It has been declared as critical. This vulnerability affects the function checkLogin of the file login/scripts/class.loginscript.php of the component POST Parameter Handler. The manipulation of the argument myusername leads to sql injection. The attack...
CVE-2016-15031
PHP-Login 1.0 contains a SQL injection in checkLogin() (login/scripts/class.loginscript.php) via the myusername parameter. The issue can be triggered remotely; upgrading to PHP-Login 2.0 mitigates the vulnerability. Patch 0083ec652786ddbb81335ea20da590df40035679 is identified for the fix (VDB-228...
CVE-2016-15031 PHP-Login POST Parameter class.loginscript.php checkLogin sql injection
A vulnerability was found in PHP-Login 1.0. It has been declared as critical. This vulnerability affects the function checkLogin of the file login/scripts/class.loginscript.php of the component POST Parameter Handler. The manipulation of the argument myusername leads to sql injection. The attack...