Sql injection

SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute arbitrary SQL commands via the passw parameter. NOTE: Some of these details are obtained from third party information...

CVE-2012-0913

CVE-2012-0913 affects ICloudCenter ICTimeAttendance 1.0, specifically the checklogin.aspx path. The vulnerability is a SQL injection via the passw parameter that allows remote execution of arbitrary SQL commands. This conclusion is based on multiple sources (NVD, CVE listings) describing the same...