CVE-2016-15031

PHP-Login 1.0 contains a SQL injection in checkLogin() (login/scripts/class.loginscript.php) via the myusername parameter. The issue can be triggered remotely; upgrading to PHP-Login 2.0 mitigates the vulnerability. Patch 0083ec652786ddbb81335ea20da590df40035679 is identified for the fix (VDB-228...