CVE-2003-0557 Information

Description

SQL injection vulnerability in login.asp for StoreFront 6.0 and possibly earlier versions allows remote attackers to obtain sensitive user information via SQL statements in the password field.

Reference

http://marc.info/?l=bugtraq&m=105804683203384&w=2