CVE

Id
41996  
CVE No.
CVE-2009-4561  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Admin/index.php in WebLeague 2.2.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.  
Phase
Assigned (20100104)  
Votes
None (candidate not yet proposed)  
Comments