CVE-2011-2688

CVE-2011-2688 is an SQL injection in the Apache HTTP Server module mod_authnz_external (mysql/mysql-auth.pl) affecting 3.2.5 and earlier, allowing remote attackers to execute arbitrary SQL via the user field. Exploitation is described in multiple advisories; reported impact is remote SQL injectio...