SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote malicious users to execute arbitrary SQL commands via the password field.
aspjar aspjar guestbook 1.0