CVE-2010-1521

Summary

SQL injection vulnerability in include/classes/tzn_user.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to execute arbitrary SQL commands via the password parameter to login.php.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://secunia.com/advisories/40025
• http://www.taskfreak.com/original/versions
• http://secunia.com/secunia_research/2010-79/
• http://www.securityfocus.com/archive/1/512077/100/0/threaded
• http://www.securityfocus.com/bid/41218
• http://osvdb.org/65847

References

• http://secunia.com/advisories/40025
• http://www.taskfreak.com/original/versions
• http://secunia.com/secunia_research/2010-79/
• http://www.securityfocus.com/archive/1/512077/100/0/threaded
• http://www.securityfocus.com/bid/41218
• http://osvdb.org/65847

• ←Previous
• Next→