CVE-2008-2384

CVE-2008-2384 describes a SQL injection in the Apache module mod_auth_mysql (mod-auth-mysql) when using multibyte character sets that allow a backslash as part of the encoding. The vulnerability arises from how mod_auth_mysql.c escapes multibyte inputs, enabling remote attackers to inject arbitra...