CVE-2006-6021

CVE-2006-6021 describes a SQL injection in the login component of BestWebApp Dating Site, exploitable via the username and passwd parameters, allowing remote arbitrary SQL commands. The CVE entry indicates a network attack vector with no authentication, and partial impacts to confidentiality, int...