CVE-2006-5628 Information

Description

SQL injection vulnerability in login.asp in UNISOR Content Management System (CMS) allows remote attackers to execute arbitrary SQL commands via the (1) user or (2) pass fields.

Reference

http://securityreason.com/securityalert/1800 http://www.securityfocus.com/archive/1/449905/100/0/threaded http://www.securityfocus.com/bid/20770 https://exchange.xforce.ibmcloud.com/vulnerabilities/29855