Unscored CVE-2008-0771 EUVD-2008-0781GHSA-9v2g-635q-h56f

Multiple SQL injection vulnerabilities in default.asp in Site2Nite allow remote attackers to execute arbitrary SQL commands via the (1) txt…

Published Feb 13, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple SQL injection vulnerabilities in default.asp in Site2Nite allow remote attackers to execute arbitrary SQL commands via the (1) txtUserName and (2) txtPassword parameters. NOTE: some of these details are obtained from third party information.

References

28531 third-party-advisory
20080116 [Aria-Security.Net] Real Estate Web SQL Injection mailing-list
realestatewebsite-default-sql-injection(39734) vdb-entry
3650 third-party-advisory
27330 vdb-entry