SQL injection vulnerability in admin/index.php in w3b>cms (aka w3blabor CMS) before 3.4.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the benutzername parameter (aka Username field) in a login action.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2009-02-16T17:00:00
Updated: 2024-08-07T04:40:05.078Z
Reserved: 2009-02-16T00:00:00
Link: CVE-2009-0597
Vulnrichment
No data.
NVD
Status : Modified
Published: 2009-02-16T17:30:05.030
Modified: 2024-11-21T01:00:27.440
Link: CVE-2009-0597
Redhat
No data.