Disaster recovery services from independent tape testing through to off-site backup loan servers, all designed to minimise the risks of system failure in a proven and cost effective manner. | Dragon Internet Events Listing admin_login.asp Multiple Field SQL Injection |
| Thursday, 16 November 2006 | |
|
Events Listing contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'admin_login.asp' script not properly sanitizing user-supplied input to the 'username' and 'password' variables. This may allow an attacker to inject or manipulate SQL queries in the backend database. Read more... |