Description
SQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.
References
- 13730 vdb-entry
- http://www.under9round.com/nez.txt
- 1014038 vdb-entry
- 15469 third-party-advisory