CVE-2007-6168

CVE-2007-6168 affects VU Case Manager: SQL injection in default.asp (Login Page) via the username parameter, enabling remote SQL execution. This is a different vector from CVE-2007-6143, which uses the password parameter. No remediation or exploit details are provided in the supplied documents.

CVE-2007-6143

Vulnerability: CVE-2007-6143 affects VU Case Manager (default.asp login page). Cause: SQL injection via the password parameter, enabling remote attackers to execute arbitrary SQL commands. Impact: partial confidentiality, integrity, and availability concerns for the application, with network-leve...