Description
Multiple SQL injection vulnerabilities in rb_auth.php in Roberto Butti CALimba 0.99.2 beta and earlier allow remote attackers to execute arbitrary SQL commands and bypass login authentication via the (1) login and (2) password parameters.
References
- 16632 vdb-entry
- calimba-rbauth-sql-injection(24578) vdb-entry
- http://www.evuln.com/vulns/68/summary.html
- 20060217 [eVuln] CALimba Authentication Bypass Vulnerability mailing-list
- ADV-2006-0523 vdb-entry
- 453 third-party-advisory
- 18856 third-party-advisory