CVE-2005-4207
SQL injection vulnerability in BTGrup Admin WebController Script allows remote attackers to execute SQL commands via the (1) Username and (2) Password fields.
Date published : 2005-12-13
http://www.securityfocus.com/bid/15819
http://www.securityfocus.com/archive/1/419237/100/0/threaded