CVE-2007-0575

CVE-2007-0575 describes multiple SQL injection vulnerabilities in the administrative login page (admin/login.asp) of ASPCode.net AdMentor. The root cause, as stated, is unsafely constructed SQL queries via the (1) Userid and (2) Password fields, enabling remote attackers to potentially execute ar...

CVE-2002-0308

Affected software : AdMentor (2.11). Vulnerability : admin.asp authentication bypass via SQL injection on the Login and Password arguments. Root cause : improper input handling in the login routine enabling SQL injection. Impact : remote attacker can bypass authentication and gain privileges. Exp...