Description
Multiple SQL injection vulnerabilities in check_login.asp in Bloggage allow remote attackers to execute arbitrary SQL commands via the (1) acc_name and (2) password parameter.
References
- 19751 third-party-advisory
- 24797 vdb-entry
- 17639 vdb-entry
- ADV-2006-1448 vdb-entry
- http://colander.altervista.org/advisory/bloggage.txt
- 20060421 bloggage Remote SQL Injection mailing-list
- 751 third-party-advisory
- bloggage-checklogin-sql-injection(25955) vdb-entry