CVE-2008-6749 in FlexPHPDirectory
Summary
Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPDirectory 0.0.1, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) checkuser and (2) checkpass parameters.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
04/24/2009
Disclosure
04/24/2009
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 47896 | China-on-site FlexPHPDirectory usercheck.php sql injection | 89 | Proof-of-Concept | Not defined | CVE-2008-6749 |