Description
SQL injection vulnerability in login.php in Digital Scribe 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter.
References
- 20050915 Digital Scribe v1.4 Login Bypass / SQL injection / remote code execution mailing-list
- 14843 vdb-entry
- 16841 third-party-advisory
- 10 third-party-advisory
- 1014909 vdb-entry
- digitalscribe-login-sql-injection(22286) vdb-entry
- ADV-2005-1757 vdb-entry
- 19460 vdb-entry
- http://rgod.altervista.org/dscribe14.html