[Aria-Security.net] ABI Version 3.7.9.17 Remote SQL Injection

From: <The-0utl4w-noreply_at_aria-security.net>
Date: 20 Dec 2007 05:20:09 -0000

('binary' encoding is not supported, stored as-is) Aria-Security Team
http://Aria-Security.Net
--------------------------
ABI Version 3.7.9.17 Remote SQL Injection

The forget password section at LostPwd.asp? has the vulnerability to run SQL query and give the attacker the information neeeded.

The-0utl4w
(Credits goes to Aria-Security)
Received on Dec 20 2007