Description
SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands via the password field.
References
- 12521 vdb-entry
- aspjar-guest-login-sql-injection(19299) vdb-entry
- 20050210 ASPjar guestbook (Injection in login page) mailing-list
- 14225 third-party-advisory