Unscored CVE-2006-3515 EUVD-2006-3510GHSA-ffg2-5rcp-wwwj

SQL injection vulnerability in the loginADP function in ajaxp.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL comman…

Published Jul 11, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in the loginADP function in ajaxp.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters.

References

20060708 [KAPDA::#46] - AjaxPortal Authentication Bypass mailing-list
27067 vdb-entry
20060709 Re: [KAPDA::#46] - AjaxPortal Authentication Bypass mailing-list
20985 third-party-advisory
18897 vdb-entry
http://www.kapda.ir/advisory-355.html
ADV-2006-2714 vdb-entry
1206 third-party-advisory