CVE-2008-5892

Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL commands via 1 the ID parameter to admindblayers.asp in an update action, 2 the adminid parameter to adminloginCheck.asp aka the USERNAME field in adminmain.asp, and 3 the PassWord parameter to...

Sql injection

Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL commands via 1 the ID parameter to admindblayers.asp in an update action, 2 the adminid parameter to adminloginCheck.asp aka the USERNAME field in adminmain.asp, and 3 the PassWord parameter to...

CVE-2008-5892

CVE-2008-5892 involves multiple SQL injection vulnerabilities in ClickAndEmail. The issues allow remote attackers to execute arbitrary SQL commands through (1) the ID parameter to admin_dblayers.asp in an update action, (2) the adminid parameter to admin_loginCheck.asp (the USERNAME field in admi...

CVE-2008-5892: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ClickAndEmail allow remote attackers to execute arbitrary SQL commands via 1 the ID parameter to admindblayers.asp in an update action, 2 the adminid parameter to adminloginCheck.asp aka the USERNAME field in adminmain.asp, and 3 the PassWord parameter to...