Description
SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute arbitrary SQL commands via the username parameter.
References
- 1809 third-party-advisory
- 20809 vdb-entry
- 20061030 opendocman <= 1.2p3 Bypass admin/user Login mailing-list
- opendocman-username-sql-injection(29909) vdb-entry