Multiple SQL injection vulnerabilities in login.php in pL-PHP beta 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) pass parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Pl-php | Pl-php | * | 0.9_beta (including) |