← Database

CVE-2010-1046

HIGH CVSS: 7.5 Published: 2010-03-23 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) userid (username) and (2) password parameters.

Affected Platforms

Ryan Marshall Rostermain

Weakness Type

CWE-89

References