Description
SQL injection vulnerability in login.asp in an unknown product by Online Solutions for Educators (OS4E) allows remote attackers to execute arbitrary SQL commands via the password.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
No affected versions have been published.
Timeline
- Published
- May 28, 2005
- Last modified
- Jun 16, 2026
- NVD status
- Modified