Description
SQL injection vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to execute arbitrary SQL commands via the frmuser (aka Username) parameter.
References
- 59301 vdb-entry
- 36777 vdb-entry
- opendocman-user-sql-injection(53886) vdb-entry
- 30750 third-party-advisory
- http://www.packetstormsecurity.org/0910-exploits/opendocman-sqlxss.txt