← Database

CVE-2006-4861

HIGH CVSS: 7.5 Published: 2006-09-19 Modified: 2026-06-16

Description

SQL injection vulnerability in loginprocess.asp in Mohammed Mehdi Panjwani Complain Center 1 allows remote attackers to execute arbitrary SQL commands via the (1) TxtUser (aka Username) and (2) TxtPass (aka Password) parameters in login.asp.

Affected Platforms

Mohammed Mehdi Panjwani Complain Center

Weakness Type

NVD-CWE-Other

References