TI-2009-04114 CVE-2009-4351 · GHSA-7mwj-hpjp-qfjqSQL injection vulnerability in ADMIN/loginaction.php in WSCreator 1.1, when…Priority LOW 33SQL injection vulnerability in ADMIN/loginaction.php in WSCreator 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the Email (aka username) parameter.CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01241 · Published 2009-12-17 · No fix listed CWE-89