Vulnerabilities > Develop IT Easy > Membership System > 1.3

DATE CVE VULNERABILITY TITLE RISK
2008-11-13 CVE-2008-5054 SQL Injection vulnerability in Develop IT Easy Membership System 1.3
Multiple SQL injection vulnerabilities in Develop It Easy Membership System 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameters to customer_login.php and the (3) user_name and (4) user_pass parameters to admin/index.php.
network
low complexity
develop-it-easy CWE-89
7.5