CVE-2010-1521 - SQL injection vulnerability in include/classes/tzn_user.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to execute arbitrary SQL commands via the password parameter to login.php

Back Back to CVE browser

HIGH

SQL injection vulnerability in include/classes/tzn_user.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to execute arbitrary SQL commands via the password parameter to login.php

Published Jun 30, 2010

7.5

HIGH

CVSS 2.0

EPSS 1.26%

Description

SQL injection vulnerability in include/classes/tzn_user.php in TaskFreak! Original multi user before 0.6.4 allows remote attackers to execute arbitrary SQL commands via the password parameter to login.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (6)

http://osvdb.org/65847
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/40025
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/secunia_research/2010-79/
x_refsource_MISCVendor Advisory
http://www.securityfocus.com/archive/1/512077/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/41218
vdb-entryx_refsource_BID
http://www.taskfreak.com/original/versions
x_refsource_CONFIRMPatch

Link	Providers	Tags
http://osvdb.org/65847		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/40025		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/secunia_research/2010-79/		x_refsource_MISCVendor Advisory
http://www.securityfocus.com/archive/1/512077/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/41218		vdb-entryx_refsource_BID
http://www.taskfreak.com/original/versions		x_refsource_CONFIRMPatch