CVE-2005-1639

Description

SQL injection vulnerability in Sigmaweb.DLL in Sigma ISP Manager 6.6 allows remote attackers to execute arbitrary SQL commands via the (1) username, (2) password, or (3) domain fields.

Affected products

• atinegar / sigma_isp_manager6.6

References

• MISChttp://www.under9round.com/sigma.txt
• MISChttp://www.osvdb.org/16620
• VENDOR_ADVISORYhttp://secunia.com/advisories/15379