CVE-2005-1785

SQL injection vulnerability in ad/login.asp in ZonGG 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2005-1785

The vulnerability is in ZonGG 1.2, specifically the ad/login.asp endpoint. A SQL injection flaw allows remote attackers to inject arbitrary SQL commands via the password parameter, as described for CVE-2005-1785. The connected PT-2005-2753 entry provides a practical mitigation: avoid using the pa...