Description SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter. References 13404 vdb-entry 1013837 vdb-entry 15968 vdb-entry