Description
Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the (1) Email Address and (2) Password fields in (a) login.asp and (b) admin_login.asp.
References
- 20071023 [Aria-Security.Net] CodeWidgets.Com Online Event Registration Multiple login SQL Injection mailing-list
- 27375 third-party-advisory
- 38168 vdb-entry
- eventregistration-login-sql-injection(37424) vdb-entry
- 26192 vdb-entry
- 38167 vdb-entry
- 3313 third-party-advisory