CVE-2008-6365

CVE-2008-6365 describes a SQL injection vulnerability in Ad Server Solutions’ Ad Management Software (Java) affecting logon.jsp and related logon_processing.jsp. The issue can allow remote attackers to modify/execute SQL via the uname/pass parameters. Root cause per description is improper handli...

CVE-2008-6365

SQL injection vulnerability in logon.jsp in Ad Server Solutions Ad Management Software Java allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, related to the uname or pass parameters to logon.jsp or logonprocessing.jsp. NOTE: some of these details are...