Unscored CVE-2007-6469 EUVD-2007-6435GHSA-48mx-4547-4qjp

SQL injection vulnerability in index.php in phpRPG 0.8, when magic_qutoes_gpc is disabled, allows remote attackers to execute arbitrary SQL…

Published Dec 20, 2007 · Updated Sep 17, 2024 · Assigned by mitre

Description

SQL injection vulnerability in index.php in phpRPG 0.8, when magic_qutoes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information.

References

27968 third-party-advisory
20071214 PHP RPG - Sql Injection and Session Information Disclosure mailing-list
26884 vdb-entry