AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.
| Software | From | Fixed in |
|---|---|---|
| adcycle / adcycle | 1.14 | 1.14.x |
| adcycle / adcycle | 1.12 | 1.12.x |
| adcycle / adcycle | 0.78b | 0.78b.x |
| adcycle / adcycle | 1.0 | 1.0.x |
| adcycle / adcycle | 1.15 | 1.15.x |
| adcycle / adcycle | 1.13 | 1.13.x |
| adcycle / adcycle | 0.77 | 0.77.x |
| adcycle / adcycle | 0.77b | 0.77b.x |