.:[ packet storm ]:.
                         
security in numbers
security in numbers

 ///  File Name:secunia-etssql.txt
Description:
Secunia Research has discovered some vulnerabilities in Employee Timeclock Software, which can be exploited by malicious people to conduct SQL injection attacks. Input passed to the "username" and "password" parameters in auth.php and login_action.php is not properly sanitized before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. Version 0.99 is affected.
Homepage:http://secunia.com/
File Size:4407
Related CVE(s):CVE-2010-0122
Last Modified:Mar 10 10:55:45 2010
MD5 Checksum:97deca06ff6efb5d59e274ff9355eacb

 .:. Back