SQL injection vulnerability in login.php in TheWebForum (twf) 1.2.1 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the username parameter (aka the u variable).
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2006-01-09T11:00:00
Updated: 2018-10-19T14:57:01
Reserved: 2006-01-09T00:00:00
Link: CVE-2006-0135
JSON object: View
NVD Information
Status : Modified
Published: 2006-01-09T11:03:00.000
Modified: 2018-10-19T15:42:46.763
Link: CVE-2006-0135
JSON object: View
Redhat Information
No data.
CWE