CVE-2007-0560
SQL injection vulnerability in user.asp in ASP EDGE 1.2b and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter.
Date published : 2007-01-30
http://www.securityfocus.com/bid/22212
http://www.securityfocus.com/archive/1/458058/100/100/threaded