CVE-2006-6090

CVE-2006-6090 documents multiple SQL injection vulnerabilities in the BaalAsp forum that allow remote attackers to execute arbitrary SQL commands via (1) the password parameter to adminlogin.asp, (2) the name or password parameter to userlogin.asp, or (3) the search parameter to search.asp. The N...