Description
SQL injection vulnerability in Sigmaweb.DLL in Sigma ISP Manager 6.6 allows remote attackers to execute arbitrary SQL commands via the (1) username, (2) password, or (3) domain fields.
References
- http://www.under9round.com/sigma.txt
- 16620 vdb-entry
- 15379 third-party-advisory