|
|
 |
Sonicwall Signatures
Go to All Categories list.
| | ProFTPD mod_sql SQL Injection |
Category: FTP
| mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands (e.g., COPY TO PROGRAM). |
|
|
|
