CVE-2006-5228: Undefined Security Weakness

Multiple SQL injection vulnerabilities in the Google Gadget login.php gadget/login.php in Rob Hensley ackerTodo 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uplogin, 2 uppass, or 3 upnumtasks parameters...