Description
SQL injection vulnerability in gc.php in GeheimChaos 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the Temp_entered_password parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
References
- 21355 third-party-advisory
- geheimchaos-gc-registieren-sql-injection(28221) vdb-entry