gmmovinparts.com SQLi via forgot_password.jsp

Summary

The site gmmovingparts.com did not validate all user supplied input potentially allowing SQL Injection. The vulnerability has been remediated

This was one of multiple SQLi on the site. A more complete PoC was done for the initial SQLi that allowed me to access the administrator portal of the site.

Thanks GM!