Triple Play is a PHP script that CableTEL offers its clients to check their internet traffic status.
Triple Play suffers from a security bypass vulnerability (login.php) with sql injection attack. The login page can be accessed only by CableTEL's users. The script fails to sanitize user/pass login page allowing the attacker to bypass the security mechanism and view sensitive information that can be further used in a social engineering attack and such.