CVE-2007-0575

CVE-2007-0575 describes multiple SQL injection vulnerabilities in the administrative login page (admin/login.asp) of ASPCode.net AdMentor. The root cause, as stated, is unsafely constructed SQL queries via the (1) Userid and (2) Password fields, enabling remote attackers to potentially execute ar...