CVE-2009-3315

Publication date

2009-09-23 10:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attackers to execute arbitrary SQL commands via the Username field.