CVE-2009-0542

This writeup describes an SQL injection vulnerability in ProFTPD's SQL authentication mechanism. The exploit leverages improper handling of the '%' character to bypass authentication by injecting a malicious SQL query into the username field.

This exploit leverages an SQL injection vulnerability in ProFTPD with mod_mysql to bypass authentication. It allows an attacker to execute FTP commands such as listing, deleting, renaming files, and creating directories without valid credentials.