Hood3Drob1N

**Name of the Vulnerable Software and Affected Versions** MangosWeb Enhanced version 3.0.3 **Description** A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the `login` parameter in a login action to the "index.php" endpoint. **Recommendations** For MangosWeb Enhanced version 3.0.3, consider restricting access to the "index.php" endpoint until a patch is available, and avoid using the `login` parameter in login actions to minimize the risk of exploitation.