Sql injection

Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the UserName parameter in 1 validatelogin.asp or 2 adminlogin.asp...