Multiple SQL injection vulnerabilities in the administrative login page (admin/login.asp) in ASPCode.net AdMentor allow remote attackers to execute arbitrary SQL commands via the (1) Userid and (2) Password fields.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Admentor | Stefan_holmberg | * | * |