Description
Multiple SQL injection vulnerabilities in index.php in PHP Support Tickets 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields, and (3) id parameter.
References
- 18067 third-party-advisory
- 1015352 vdb-entry
- 21730 vdb-entry
- ADV-2005-2928 vdb-entry
- 15853 vdb-entry
- http://www.nii.co.in/vuln/PHPSupportTickets.html