SQL injection vulnerability in login.php in Digital Scribe 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/22286
http://www.vupen.com/english/advisories/2005/1757
http://securitytracker.com/id?1014909
http://securityreason.com/securityalert/10