45 matches found
CVE-2007-6517
SQL injection vulnerability in the forget password section LostPwd.asp in Eagle Software Aeries Browser Interface ABI 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the EmailAddress parameter. NOTE: some of these details are obtained from third party information...
CVE-2007-6517: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the forget password section LostPwd.asp in Eagle Software Aeries Browser Interface ABI 3.7.9.17 allows remote attackers to execute arbitrary SQL commands via the EmailAddress parameter. NOTE: some of these details are obtained from third party information...
CVE-2007-6173: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to inject arbitrary web script or HTML via the emailAddress parameter in a Send New Password action, a different vector than CVE-2007-6055. NOTE: some of these details are obtained...
CVE-2005-1784: Undefined Security Weakness
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp...
CVE-2005-1784
Hosting Controller 6.1 HotFix 2.0 and earlier allows remote attackers to steal passwords and gain privileges via a modified emailaddress parameter in an updateprofile action for UserProfile.asp...