CVE-2005-3521: Undefined Security Weakness

SQL injection vulnerability in resetcore.php in e107 0.617 through 0.6173 allows remote attackers to execute arbitrary SQL commands, bypass authentication, and inject HTML or script via the 1 aname parameter or 2 user field of the login page...