LDF Sql injection vulnerability

[arash.setayeshi@xxxxxxxxx]

Product : LDF 
vendor : www.ldf.22.cn

LDF Sql injection vulnerability (in login.asp page) =>

example : 
http://example/[ldf path]/login.asp?user=[SQL COMMAND]