Multiple SQL injection vulnerabilities in loginprocess.php in qliteNews 2005.07.01 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Qlitenews | R2xdesign | 2005-07-01 (including) | 2005-07-01 (including) |