CVE-2009-0407

Publication date

2009-02-03 19:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL commands via the username parameter.