OpenDocMan Cross-Site Scripting and SQL Injection

OpenDocMan is a PHP-based open-source document manager. The application is exposed to multiple cross-site scripting issues and an SQL injection issue that affects the "Username" parameter when logging in to the application because of insufficient input validation. OpenDocMan versions 1.2.5 is affected by these issues.

Ref: http://securityreason.com/wlb_show/WLB-2009100041

09.44.80 - CVE: Not Available
Platform: Web Application - SQL Injection