CVE-2006-0693

CALimba (Roberto Butti) 0.99.2 beta and earlier has SQL injection in rb_auth.php. The login and password parameters are not sanitized before being used in a SQL query, enabling remote attackers to bypass authentication and execute arbitrary SQL commands. Root cause: unsanitized user inputs in the...