Description
SQL injection vulnerability in main.asp for Ocean12 Membership Manager Pro 1.x allows remote attackers to execute arbitrary SQL commands via the UserID parameter.
References
- 1013667 vdb-entry
- 14864 third-party-advisory
- 13049 vdb-entry
- http://www.hackerscenter.com/archive/view.asp?id=1865
- 15307 vdb-entry
- ocean12-membershipmgr-mainasp-sql-injection(20015) vdb-entry