Description
SQL injection vulnerability in login.php in Ruperts News allows remote attackers to execute arbitrary SQL commands via the username parameter.
References
- 17758 vdb-entry
- rupertsnewsscript-login-sql-injection(26144) vdb-entry
- ADV-2006-1580 vdb-entry
- 19895 third-party-advisory
- http://evuln.com/vulns/128/