Lincoln

The web server has a buffer overflow via a long password in an administration login POST request, leading to arbitrary code execution. This issue can be exploited through an EIP-overwrite buffer overflow.

The issue involves multiple SQL injection vulnerabilities.

The issue is related to a buffer overflow in an ActiveX control in SSHelper.dll. This allows remote attackers to execute arbitrary code via a long third argument to the `SetRegString` method.