CVE-2008-5582: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the email parameter...

CVE-2007-4052: Undefined Security Weakness

Cross-site scripting XSS vulnerability in utilities/login.asp in nukedit 4.9.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...