Description (CNA)
SQL injection vulnerability in index.php in TClanPortal 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands, and retrieve all usernames and passwords, via the id parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.osvdb.org/20305
- http://secunia.com/advisories/17324
- http://www.vupen.com/english/advisories/2005/2187
- http://downloads.securityfocus.com/vulnerabilities/exploits/TClanPortal_sql_inj.pl
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22869
- http://www.securityfocus.com/bid/15173
ADP enrichment
No English description supplied.