Sql injection

SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the 1 password parameter in 1.1 and 2 ppassword parameter in 1.5. NOTE: some of these details are obtained from third party information...

CVE-2009-2366

CVE-2009-2366 describes an SQL injection in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5. The vulnerability stems from unsafely handling user-supplied credentials in login.asp, specifically the (1) password parameter for ForumPal FE 1.1 and (2) p_password for ForumPal 1.5, allowing remote...