CVE-2008-0487: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in login.asp in ASPired2Protect allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters. NOTE: some of these details are obtained from third party information...