Related information

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

Logaholic Web Analytics Software

Jupiter Cms Multiple Vulnerabilities

[waraxe-2007-SA#060] - Sensitive info disclosure in CuteNews <= 1.4.5

[ISecAuditors Security Advisories] Tikiwiki CMS is vulnerable to path traversal attack

From:	The-0utl4w-noreply_(at)_aria-security.net <The-0utl4w-noreply_(at)_aria-security.net>
Date:	21.12.2007
Subject:	[Aria-Security.net] ABI Version 3.7.9.17 Remote SQL Injection

Aria-Security Team
httP://Aria-Security.Net
--------------------------
ABI Version 3.7.9.17 Remote SQL Injection

The forget password section at LostPwd.asp? has the vulnerability to run SQL query and give the attacker the information neeeded.

The-0utl4w
(Credits goes to Aria-Security)