CVE-2005-1429

Description

SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter.

Affected products

• abczone.it / wwwguestbook1.1 – 1.1

References

• MISChttp://www.securityfocus.com/bid/13404
• MISChttp://securitytracker.com/id?1013837
• MISChttp://www.osvdb.org/15968