CVE ID:	CVE-2011-2688
Description:	SQL injection vulnerability in mysql/mysql-auth.pl in the mod_authnz_external module 3.2.5 and earlier for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the user field.
Test IDs:	1.3.6.1.4.1.25623.1.0.70786   1.3.6.1.4.1.25623.1.0.69988
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2688 45240 http://secunia.com/advisories/45240 48653 http://www.securityfocus.com/bid/48653 DSA-2279 http://www.debian.org/security/2011/dsa-2279 [oss-security] 20110712 CVE id request: apache mod-auth-external http://www.openwall.com/lists/oss-security/2011/07/12/10 [oss-security] 20110712 Re: CVE id request: apache mod-auth-external http://www.openwall.com/lists/oss-security/2011/07/12/17 http://anders.fix.no/software/#unix http://anders.fix.no/software/#unix http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=633637 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=633637 http://code.google.com/p/mod-auth-external/issues/detail?id=5 http://code.google.com/p/mod-auth-external/issues/detail?id=5 modauthexternal-mysqlauth-sql-injection(68799) https://exchange.xforce.ibmcloud.com/vulnerabilities/68799