CVE-2006-1238

SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication…

published March 15, 2006

CVSS
—
EPSS
2%
Percentile
80.8
In the wild
Unconfirmed
What it is

SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/index.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02018 · 80.8th percentile
Published
2006-03-15T16:00Z
EPSS history
Timeline
  • 15 MAR 16:00Z
    SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication…
    cvelistv5