Description
SQL injection vulnerability in admin.asp in FunkyASP AD System 1.1 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password parameter.
References
- 15494 third-party-advisory
- 1014056 vdb-entry
- http://www.under9round.com/funky-asp.txt
- http://www.funkyasp.co.uk/product.asp?prod=1¤cy=USD