Unscored CVE-2006-3190 EUVD-2006-3187GHSA-v3pv-gmwr-pqwr

SQL injection vulnerability in administration/includes/login/auth.php in HotPlug CMS 1.0 allows remote attackers to execute arbitrary SQL c…

Published Jun 23, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in administration/includes/login/auth.php in HotPlug CMS 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password parameters.

References

ADV-2006-2403 vdb-entry
20060615 HotPlugCMS_1.0 - SQL Injection Vulnerability mailing-list
1016322 vdb-entry