PT-2011-1974

Name of the Vulnerable Software and Affected Versions ScriptsFeed Recipes Listing Portal version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the loginid parameter, also known as the UserName field, in the control/admin login.php file...

Sql injection

SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

PT-2011-1293

Name of the Vulnerable Software and Affected Versions jSite version 1.0 OE Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the username parameter in the "admin/login.php" endpoint. Recommendations For jSite version 1.0 OE, consider...

CVE-2008-7301: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-4842

The vulnerability is a SQL injection in admin/login.php of the MHP DownloadScript (aka MH Products Download Center) version 2.2. The root cause is improper handling of the Name parameter, enabling remote attackers to craft inputs that cause arbitrary SQL execution. Impact per sources is uncontrol...

CVE-2010-4842: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/login.php in MHP DownloadScript aka MH Products Download Center 2.2 allows remote attackers to execute arbitrary SQL commands via the Name parameter. NOTE: some of these details are obtained from third party information...

PT-2011-1777

Name of the Vulnerable Software and Affected Versions MHP DownloadScript versions 2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the Name parameter in the "admin/login.php" endpoint. Recommendations For version 2.2, consider restricting...

CVE-2011-2470: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in chat/base/admin/login.php in A Really Simple Chat ARSC 3.3-rc2 allows remote attackers to inject arbitrary web script or HTML via the arscmessage parameter...

PT-2011-3893

Name of the Vulnerable Software and Affected Versions A Really Simple Chat ARSC versions 3.3-rc2 Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the arsc message parameter in the...

DGNews 2.1 SQL Injection

Remote SQL Injection Vulnerability name : DGNews v 2.1 Author : kalashnikov dork : inurl:news.php?go=fullnews&newsid admincp : admin/login.php // the user is "admin"===========MYSQL INJ======= http://localhost/pach/news.php?go=fullnews&newsid=1' =========================== Warning: mysqlnumrows:...

CVE-2010-3688: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ADMIN/login.php in NetArtMEDIA WebSiteAdmin allows remote emote attackers to include and execute arbitrary local files via directory traversal sequences in the lng parameter...

PT-2010-5002

Name of the Vulnerable Software and Affected Versions NetArtMEDIA WebSiteAdmin affected versions not specified Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the lng parameter of the ADMIN/login.php file...

CVE-2010-1346: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/login.php in Mini CMS RibaFS 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the login parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-2883

An SQL injection vulnerability in SaphpLesson 4.0 (admin/login.php) can be triggered when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL via the cp_username parameter. The issue is related to an error in the CleanVar function in includes/functions.php. CVSS v2 ba...

CVE-2009-2883: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/login.php in SaphpLesson 4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cpusername parameter, related to an error in the CleanVar function in includes/functions.php...

CVE-2009-2236: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in yad-admin/login.php in Your Article Directory allows remote attackers to execute arbitrary SQL commands via the txtAdminEmail parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-2154: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/login.php in Impleo Music Collection 2.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-2025: Undefined Security Weakness

admin/login.php in DM FileManager 3.9.2 allows remote attackers to bypass authentication and gain administrative access by setting the 1 USER, 2 GROUPID, 3 GROUP, and 4 USERID cookies to certain values...

Sql injection

Multiple SQL injection vulnerabilities in admin/login.php in Wright Way Services Recipe Script 5 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 Password fields, as reachable from admin/index.php...