CVE-2008-6366

SQL injection vulnerability CVE-2008-6366 affects Ad Server Solutions Affiliate Software Java 4.0: the logon.jsp page (and related logon_process.jsp) processes user inputs for username and password in a way that allows arbitrary SQL execution. This is exploitable remotely and could lead to data d...

CVE-2008-6366

SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...