ExoPHPDesk 'admin.php' SQL Injection Authentication Bypass Vulnerability

ExoPHPDesk is prone to an SQL-injection vulnerability.

A successful exploit may allow an attacker to bypass password authentication employed by the application.

ExoPHPDesk 1.2.1 is vulnerable; other versions may also be affected.


 

Privacy Statement
Copyright 2010, SecurityFocus