Unscored CVE-2006-4861 EUVD-2006-4848GHSA-7gmj-jh8c-p949

SQL injection vulnerability in loginprocess.asp in Mohammed Mehdi Panjwani Complain Center 1 allows remote attackers to execute arbitrary S…

Published Sep 19, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in loginprocess.asp in Mohammed Mehdi Panjwani Complain Center 1 allows remote attackers to execute arbitrary SQL commands via the (1) TxtUser (aka Username) and (2) TxtPass (aka Password) parameters in login.asp.

References

1601 third-party-advisory
20060914 Complain Center v1(loginprocess.asp) Admin ByPASS SQL Injection mailing-list