Description
Multiple SQL injection vulnerabilities in loginprocess.php in qliteNews 2005.07.01 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.
References
- qlitenews-loginprocess-sql-injection(25565) vdb-entry
- 24301 vdb-entry
- 19476 third-party-advisory
- 701 third-party-advisory
- http://evuln.com/vulns/114/summary.html
- 17333 vdb-entry
- 20060413 [eVuln] qliteNews SQL Injection Vulnerability mailing-list
- ADV-2006-1182 vdb-entry