Description
SQL injection vulnerability in login.asp in Redbinaria Sistema Integrado de Administracion de Portales (SIAP) allows remote attackers to execute arbitrary SQL commands via the username parameter.
References
- 20061125 Siap Cms Sql Injection (login.asp) mailing-list
- 21286 vdb-entry
- siap-login-sql-injection(30484) vdb-entry
- 21346 vdb-entry
- 1957 third-party-advisory