CVE-2007-3992

SQL injection vulnerability in virlogin.asp in iExpress Property Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the Username parameter is covered by CVE-2006-6029. NOTE: the provenance of this information is unknown; the details are obtained solely...

CVE-2007-3992

Summary (CVE-2007-3992): SQL injection vulnerability in the web component vir_login.asp of iExpress Property Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter (the related Username issue is tracked under CVE-2006-6029). Documented impact is partial confident...