Unscored CVE-2006-5628 EUVD-2006-5613GHSA-rgg2-xrh6-hqgp

SQL injection vulnerability in login.asp in UNISOR Content Management System (CMS) allows remote attackers to execute arbitrary SQL command…

Published Oct 31, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in login.asp in UNISOR Content Management System (CMS) allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) pass fields.

References

20770 vdb-entry
20061027 UNISOR CMS sql injection mailing-list
1800 third-party-advisory
unisorcms-login-sql-injection(29855) vdb-entry