Signature Detail

HTTP: DH-MLM login.php SQL Injection

This signature detects attempts to exploit a known vulnerability in DH-MLM. It is due to insufficient validation of user-supplied input. An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized actions on the underlying database.

Extended Description

DH-MLM is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database. DH-MLM 3.6.0 is vulnerable; other versions may also be affected.

Affected Products

• DH Softwares DH-MLM 3.6.0

References

• BugTraq: 47949
• URL: http://www.dhsoftwares.com/products/index.php