Description
SQL injection vulnerability in admin/auth.inc.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the loginname parameter.
References
- http://www.geeklog.net/index.php?topic=Security
- 993 third-party-advisory
- 20060529 [KAPDA::#45] - geeklog multiple vulnerabilities mailing-list
- ADV-2006-2050 vdb-entry
- geeklog-auth-libsecurity-sql-injection(26863) vdb-entry
- http://kapda.ir/advisory-336.html
- 20316 third-party-advisory
- 18154 vdb-entry