SQL Injection in loginform.php in ProjectWorld's Travel Management System v1.0 allows remote attackers to bypass authentication via SQL Injection in the 'username' and 'password' fields.

Elastic Security Lab


Elastic Security Labs empowers security teams across the globe with novel security intelligence research and free to use tools.

Listed: