SQL Injection in Http-Solution Project Man

CVE-2010-2134

Multiple SQL injection vulnerabilities in login.php in Project Man 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.

Vulnerability class: SQL Injection

EPSS: 0.018 (76.9th percentile) — read the EPSS interpretation.

Affected products

Http-solution Project_man — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (vdb-entry, x_refsource_XF)