Sql injection

SQL injection vulnerability in logon.jsp in Ad Server Solutions Affiliate Software Java 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password, possibly related to the uname and pass parameters to logonprocess.jsp. NOTE: some of these details are obtained...