Description
SQL injection vulnerability in cpLogin.asp in ASP Scripter Easy Portal 1.4 and Live Support 1.3 allows remote attackers to execute arbitrary SQL commands via the Password parameter.
References
- 1874 third-party-advisory
- ADV-2006-4499 vdb-entry
- 21031 vdb-entry
- 20061112 Asp Scripter Products (cpLogin.asp) Remote SQL ByPass Injection Vulnerability mailing-list
- 22856 third-party-advisory