CVE-2007-5704: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the 1 Email Address and 2 Password fields in a login.asp and b adminlogin.asp...