Secunia

Audun Larsen has reported a vulnerability in PHP Classifieds, which can be exploited by malicious people to conduct SQL injection attacks.

Input passed to the "username" and "password" parameters in member_login.php isn't properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Successful exploitation allows bypassing of login authentication but requires that the username is known and "magic_quotes_gpc" is disabled.

The vulnerability has been reported in version 6.20 with member_login.php dated before 2006-02-14. Prior versions may also be affected.

Solution
Apply patch.
Further details available in Customer Area

Provided and/or discovered by
Audun Larsen

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area