Kinesis Interactive Cinema System Security Vulnerabilities

CVE-2006-5450

SQL injection vulnerability in index.asp in Kinesis Interactive Cinema System (KICS) CMS allows remote attackers to execute arbitrary SQL commands via the (1) txtUsername (user) or (2) txtPassword (pass)...