Description
SQL injection vulnerability in login.php in Scriptme SmE GB Host 1.21 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the Username parameter.
References
- http://www.evuln.com/vulns/66/summary.html
- ADV-2006-0543 vdb-entry
- 16609 vdb-entry
- smegbhost-login-sql-injection(24544) vdb-entry
- 20060216 [eVuln] SmE GB Host Authentication Bypass Vulnerability mailing-list
- 18823 third-party-advisory