3 matches found
Sql injection
SQL injection vulnerability in LoginValidate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL commands via the Password parameter to login.asp...
CVE-2006-0192
SQL injection vulnerability in LoginValidate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL commands via the Password parameter to login.asp...
CVE-2006-0192
SQL injection vulnerability in ASPSurvey 1.10 (Login_Validate.asp) allows remote attackers to inject SQL through the Password parameter to login.asp, enabling arbitrary SQL execution. The referenced CVSSv2 metrics indicate network access, low attack complexity, no authentication, and partial impa...