Description - Authentication Bypass Vulnerability in CALimba

SQL Injection found in CALimba script.

Exploit

Available

Solution

Not available - check vendor's website

Vulnerable script: rb/cls/rb_auth.php

Variables $login $password are not properly sanitized before being used in a SQL query. This can be used to pass authorization or make any SQL query by injecting arbitrary SQL code.

Condition: magic_quotes_gpc - off