← Database

CVE-2006-3190

HIGH CVSS: 7.5 Published: 2006-06-23 Modified: 2026-06-16

Description

SQL injection vulnerability in administration/includes/login/auth.php in HotPlug CMS 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password parameters.

Affected Platforms

Hotplug Cms Hotplug Cms

Weakness Type

NVD-CWE-Other

References