Description
SQL injection vulnerability in panel/index.php in MLFFAT 2.1 allows remote attackers to execute arbitrary SQL commands via a base64-encoded supervisor cookie.
References
- 34982 vdb-entry
- ADV-2009-1308 vdb-entry
- http://securityreason.com/exploitalert/6198
- http://www.sebug.net/exploit/11292/
- mlffat-index-sql-injection(50526) vdb-entry