Description
SQL injection vulnerability in login.php in dwayner79 and Dominic Gamble Timesheet (aka Timesheet.php) 1.2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter.
References
- ADV-2006-3547 vdb-entry
- 20060905 Timesheet 1.2.1 Blind SQL Injection Vulnerability mailing-list
- 1542 third-party-advisory
- http://secaware.blogspot.com/2006/09/timesheet-121-blind-sql-injection.html
- 21831 third-party-advisory
- 19856 vdb-entry