Sql injection

SQL injection vulnerability in default.asp in Next Gen Portfolio Manager allows remote attackers to execute arbitrary SQL commands via the 1 UsersEmail or 2 UsersPassword parameter in an ExecuteTheLogin action...