EIP-2026-100392

The provided text describes an SQL injection vulnerability in LDF (likely a web application) where user-supplied input in the 'user' parameter of login.asp is not properly sanitized. This allows attackers to inject arbitrary SQL commands, potentially compromising the application or underlying database.