CVE-2011-2688

The Apache HTTP Server is vulnerable to a SQL injection in the mod_authnz_external module (specifically the mysql/mysql-auth.pl script) in version 3.2.5 and earlier . The root cause is the failure to properly sanitize input before using it in an SQL query. A remote attacker can exploit this by pr...