Description - Authentication Bypass in SZUserMgnt

SQL Injection found in SZUserMgnt script.

Exploit

Available

Solution

Not available - check vendor's website

Vulnerable script: SZUserMgnt.class.php

Variable $username isn't properly sanitized before being used in a SQL query. This can be used to bypass authentication or make any SQL query by injecting arbitrary SQL code.

All applications based on "SZUserMgnt class" are vulnerable.

Condition: magic_quotes_gpc - off