SQL injection vulnerability in index.asp in Kinesis Interactive Cinema System (KICS) CMS allows remote attackers to execute arbitrary SQL commands via the (1) txtUsername (user) or (2) txtPassword (pass) parameters.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kinesis_interactive_cinema_system | Kinesis | * | * |