CVE-2005-4140

SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter, as used by the user field.

CVSS Metrics

Affected Products (2)

GitHub Security Advisory GHSA-q5fc-7mw8-7mpw

SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote...

References (18)

• http://archives.neohapsis.com/archives/bugtraq/2005-12/0085.html
• http://rgod.altervista.org/wbaker_260_xpl.html
• http://secunia.com/advisories/17945
• http://securityreason.com/securityalert/244
• http://securitytracker.com/id?1015335
• http://www.osvdb.org/21572
• http://www.securityfocus.com/archive/1/419267/100/0/threaded
• http://www.securityfocus.com/bid/15776 Exploit
• http://www.vupen.com/english/advisories/2005/2818
• http://archives.neohapsis.com/archives/bugtraq/2005-12/0085.html
• http://rgod.altervista.org/wbaker_260_xpl.html
• http://secunia.com/advisories/17945
• http://securityreason.com/securityalert/244
• http://securitytracker.com/id?1015335
• http://www.osvdb.org/21572