CVE-2012-1673

SQL injection vulnerability in loginscript.php in e-ticketing allows remote attackers to execute arbitrary SQL commands via the password parameter.

Date published : 2012-04-11

http://www.securityfocus.com/bid/52878

http://www.exploit-db.com/exploits/18700/