CVE-2005-2440

CVE-2005-2440 affects Thomson Web Skill Vantage Manager: a SQL injection vulnerability exists in login.asp via the svmPassword parameter. Root cause is improper handling/sanitization of user input in the login flow, enabling remote attackers to craft SQL statements executed by the backend. The vu...

CVE-2005-2440: Undefined Security Weakness

SQL injection vulnerability in login.asp in Thomson Web Skill Vantage Manager allows remote attackers to execute arbitrary SQL commands via the svmPassword parameter...