CVE-2006-0624

The vulnerability CVE-2006-0624 affects Whomp Real Estate Manager XP 2005, where an SQL injection affects check.asp via the (1) username and (2) password parameters. The root cause is improper handling of user-supplied input in the authentication query, enabling remote attackers to craft arbitrar...