Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

magic photo storage website Multiple Remote File Inclusion

GForge Cross Site Scripting vulnerability

ppc engine Multiple file inclusion

createauction (cats.asp) Remote SQL Injection Vulnerability

From:	beks <beks_(at)_bsdmail.org>
Date:	09.01.2007
Subject:	AJLogin v3.5 Remote Password Disclosure Vulnerability

                       AJLogin v3.5 Remote Password Disclosure Vulnerability


#Software: AJLogin

#Version: 3.5

#Download: http://www.randomravings.com/ajasp/dload.asp?file=4

#Found by: beks

#Risk: Medium

#http://[target]/[AJLogin_Path]/ajlogin.mdb