CVE-2008-6487

CVE-2008-6487 affects Digiappz DigiAffiliate 1.4 and earlier. Multiple SQL injection vulnerabilities exist in login.asp, enabling remote attackers to execute arbitrary SQL commands via the (1) admin and (2) password fields. CVSS2 base score 7.5 (HIGH) from NVD, with network attack vector and no u...