high7.5
CVE-2005-1750
SQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.
Impact
SQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to execute arbitrary SQL commands via the password parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Distinct Web Creations | Newsletterez | Version 3.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/15469
- http://securitytracker.com/id?1014038
- http://www.securityfocus.com/bid/13730
- http://www.under9round.com/nez.txt
- http://secunia.com/advisories/15469
- http://securitytracker.com/id?1014038
- http://www.securityfocus.com/bid/13730
- http://www.under9round.com/nez.txt