CVE-2008-5632

Connected documents corroborate a SQL injection vulnerability in Active Time Billing 3.2, specifically in Account.asp, exploitable via the username and password parameters (possibly related to start.asp). The root cause is not explicitly detailed beyond the injection vector. No remediation, patch...