Unscored CVE-2007-6143 EUVD-2007-6112GHSA-6438-vw7j-m486

SQL injection vulnerability in default.asp (aka the Login Page) in VU Case Manager allows remote attackers to execute arbitrary SQL command…

Published Nov 27, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in default.asp (aka the Login Page) in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter.

References

ADV-2007-3967 vdb-entry
http://aria-security.net/forum/showthread.php?t=448
27779 third-party-advisory
20071121 [Aria-Security.Net] VU Case Manager "Username/Password" SQL Injection mailing-list
26523 vdb-entry