CVE-2012-1673 Information

Description

SQL injection vulnerability in loginscript.php in e-ticketing allows remote attackers to execute arbitrary SQL commands via the password parameter.

Reference

http://www.exploit-db.com/exploits/18700/ http://www.securityfocus.com/bid/52878 https://exchange.xforce.ibmcloud.com/vulnerabilities/74613