Security Advisory
CVE-2008-6220
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in login.php in Simple Document Management System (SDMS) 1.1.5 and 1.1.4, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the pass parameter.