SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Proftpd | Proftpd_project | 1.2.9_rc1 (including) | 1.2.9_rc1 (including) |