CVE-2009-1913

CVE-2009-1913 affects LuxBum 0.5.5. The vulnerability is a SQL injection in the login flow, specifically in manager.php, triggered when magic_quotes_gpc is disabled and dotclear authentication is used. An attacker can remotely execute arbitrary SQL commands by supplying a crafted username value i...