Description
SQL injection vulnerability in login_admin_mediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the User field.
References
- 14593 vdb-entry
- 16493 third-party-advisory
- 20050817 SQL injection in mediabox404 v1.2 mailing-list
- mediabox-sql-injection(21905) vdb-entry