CVE-2007-0784 SQL injection vulnerability in login.asp for tPassword in the Raymond BERTHOU script collection (aka RBL - ASP) allows remote attackers to execute arbitrary SQL commands via the (1) User and (2) Passw...
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in login.asp for tPassword in the Raymond BERTHOU script collection (aka RBL - ASP) allows remote attackers to execute arbitrary SQL commands via the (1) User and (2) Password parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rbl tpassword | All versions | No fix listed |
References
- forums.avenir-geopolitique.net exploit
- 2225 third-party-advisory
- 20070131 Partial source code verify - "RBL - ASP" scripts SQL injection exploit mailing-list
- 20070127 RBL - ASP (scripts with db) SQL injection mailing-list
- 20070129 RBL - ASP (scripts with db) SQL injection mailing-list