CVE-2007-4892

CVE-2007-4892 describes multiple SQL injection vulnerabilities in SWSoft Plesk versions 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for Windows. The underlying issue is SQL injection via the PLESKSESSID cookie, exploitable through (1) login.php3 and (2) auth.php3, allowing remote attackers to execute arbitrar...

CVE-2006-4892

CVE-2006-4892 concerns an SQL injection in Techno Dreams’ FAQ Manager Package 1.0, exploitable via the key parameter in faqview.asp. The vulnerability allows remote attackers to alter or reveal data by injecting arbitrary SQL commands. The NVD entry associates a high base score (7.5) with network...