Multiple SQL injection vulnerabilities in the administrative login page (admin/login.asp) in ASPCode.net AdMentor allow remote attackers to execute arbitrary SQL commands via the (1) Userid and (2) Password fields.
| Software | From | Fixed in |
|---|---|---|
| stefan_holmberg / admentor | - | - |