Description
SQL injection vulnerability in login.php in Interact 2.1.1 allows remote attackers to execute arbitrary SQL commands via the user_name parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party.
References
- 19488 third-party-advisory
- 17385 vdb-entry
- interact-login-sql-injection(25653) vdb-entry
- ADV-2006-1244 vdb-entry
- 24390 vdb-entry