Description
SQL injection vulnerability in login.asp in JiRo's Upload System (JUS) 1 allows remote attackers to execute arbitrary SQL commands via the password parameter.
References
- 16969 vdb-entry
- 1014086 vdb-entry
- http://www.under9round.com/jus.txt
- 15564 third-party-advisory