Security Advisory

CVE-2009-0479

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-02-09 01:00:00
Last updated 2024-09-17 02:57:58
Assigner mitre
State PUBLISHED

Description

Multiple SQL injection vulnerabilities in admin/admin_login.php in Online Grades 3.2.4 allow remote attackers to execute arbitrary SQL commands via the (1) uname or (2) pword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.