CVE-2007-6143

Impact

SQL injection vulnerability in default.asp (aka the Login Page) in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://aria-security.net/forum/showthread.php?t=448
• http://secunia.com/advisories/27779
• http://www.securityfocus.com/archive/1/484019/100/0/threaded
• http://www.securityfocus.com/bid/26523
• http://www.vupen.com/english/advisories/2007/3967
• http://aria-security.net/forum/showthread.php?t=448
• http://secunia.com/advisories/27779
• http://www.securityfocus.com/archive/1/484019/100/0/threaded
• http://www.securityfocus.com/bid/26523
• http://www.vupen.com/english/advisories/2007/3967