Mandriva Linux Security Advisory 2009-189 – SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x allows remote attackers to execute arbitrary SQL commands via multibyte character encodings for unspecified input. This update provides fixes for this vulnerability. Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/84444/MDVSA-2009-189-1.txt
Source: https://packetstormsecurity.com/files/84444/Mandriva-Linux-Security-Advisory-2009-189.html