EDB-30793
webappsaspVERIFIED
VUNET Mass Mailer - 'default.asp' SQL Injection
CVE-2007-6138
Aria-Security Team11/21/2007
SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via the password parameter to Default.asp (aka the Login Page). NOTE: some of these details are obtained from third party information.