CVE-2010-1521

CVE-2010-1521

EPSS 1.3%

SQL injection vulnerability in include/classes/tzn_user.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to execute arbitrary SQL commands via the password parameter to login.php.

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://osvdb.org/65847 http://secunia.com/advisories/40025 http://secunia.com/secunia_research/2010-79/http://www.securityfocus.com/archive/1/512077/100/0/threaded http://www.securityfocus.com/bid/41218 http://www.taskfreak.com/original/versions