Description
SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name.
Affected products
- ProFTPD Project / ProFTPD1.2.9_rc1 – 1.2.9_rc1