Security Advisory
CVE-2014-8340
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via a User-Agent HTTP header.