CVE-2005-4606

CVE-2005-4606 describes an SQL injection in Web Wiz apps (Site News 3.06 and earlier; Journal 1.0 and earlier; Polls 3.06 and earlier; Database Login 1.71 and earlier) via txtUserName in admin/check_user.asp. Attacker can execute arbitrary SQL commands remotely. Exploitation details, affected ver...

CVE-2005-4606

SQL injection vulnerability in checkuser.asp in multiple Web Wiz products including 1 Site News 3.06 and earlier, 2 Journal 1.0 and earlier, 3 Polls 3.06 and earlier, and 4 and Database Login 1.71 and earlier allows remote attackers to execute arbitrary SQL commands via the txtUserName parameter...