Vulnerability in Portix-Php

CVE-2006-6935

SQL injection vulnerability in the login component in Portix-PHP 0.4.2 allows remote attackers to execute arbitrary SQL commands via the username and passwd (password) fields.

EPSS: 0.011 (62.2th percentile) — read the EPSS interpretation.

Affected products

Portix-php — versions 0.4.2
N/a — versions n/a

References

cve@mitre.org (URL Repurposed, x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_SREASON, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)