Description
Multiple SQL injection vulnerabilities in login.php in Injader 2.4.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) un and (2) pw parameters.
References (2)
Core 2
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/42541
Exploit x_refsource_misc
http://www.johnleitch.net/Vulnerabilities/Injader.2.4.4.SQL.Injection/69
Scores
EPSS
0.0097
EPSS Percentile
58.4%
Details
CWE
CWE-89
Status
published
Products (1)
injader/injader
2.4.4
Published
Dec 08, 2010
Tracked Since
Feb 18, 2026