SQL injection vulnerability in Hospital Management System Project in ASP.Net MVC 1 allows aremote attacker to execute arbitrary code via the btn_login_b_Click function of the Loginpage.aspx
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')