Description (CNA)
SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the pass parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/32114
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46342
- http://secunia.com/advisories/32502
- https://www.exploit-db.com/exploits/6987
ADP enrichment
No English description supplied.