CVE-2006-1238

MEDIUM · CVSS 5.1 EPSS 1.97%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-03-15 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2006-1238

Severity

MEDIUM

CVSS

5.1

EPSS

1.97%

Original NVD Description

SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/index.php.