Description
SQL injection vulnerability in include/includes/user/login.php in ilchClan before 1.05g allows remote attackers to execute arbitrary SQL commands via the login_name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
- ilchclan-login-sql-injection(24830) vdb-entry
- ADV-2006-0676 vdb-entry
- 18951 third-party-advisory
- 23370 vdb-entry
- http://www.ilch.de/news-134.html