Multiple SQL injection vulnerabilities in login.asp in Irola My-Time (aka Timesheet) 3.5 allow remote attackers to execute arbitrary SQL commands via the (1) login (aka Username) and (2) password parameters. NOTE: some of these details are obtained from third party information.
References
Configurations
History
No history.
Information
Published : 2007-12-04 15:46
Updated : 2024-02-28 11:01
NVD link : CVE-2007-6217
Mitre link : CVE-2007-6217
CVE.ORG link : CVE-2007-6217
JSON object : View
Products Affected
irola
- my-time
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')