CVE-2013-5697

CVE-2013-5697 is a SQL injection in the Apache mod_accounting module (version 0.5 and earlier). The vulnerability arises because the Host header is used directly in a user-defined SQL query (AccountingQueryFmt) without proper sanitization, enabling remote attackers to execute arbitrary SQL. Multi...