Cross Site Scripting vulnerabilities in GForge

--------------------------------------------------------------------------- Various Vulnerabilities in GForge --------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2005 Location: Basque Country...

phpPgAdmin 3.x - Login Form Directory Traversal

phpPgAdmin 3.x - Login Form Directory Traversal source: https://www.securityfocus.com/bid/14142/info phpPgAdmin is prone to a directory traversal vulnerability. The application fails to filter directory traversal sequences from requests to the login form. All versions of phpPgAdmin are considered...

phpPgAdmin 3.x - Login Form Directory Traversal

source: https://www.securityfocus.com/bid/14142/info phpPgAdmin is prone to a directory traversal vulnerability. The application fails to filter directory traversal sequences from requests to the login form. All versions of phpPgAdmin are considered to be vulnerable at the moment...

CVE-2004-1630

The CVE-2004-1630 entry documents a Cross-site Scripting (XSS) vulnerability in Open WorkFlow Engine (OpenWFE) 1.4.x. The issue is triggered in the login form via the url parameter, allowing remote attackers to run arbitrary web script or HTML in a user’s browser. Impact is partial against integr...

CVE-2004-2202

Multiple SQL injection vulnerabilities in DUware DUclassified 4.0 through 4.2 allows remote attackers to bypass authentication and execute other commands on the server's underlying database via the 1 catid or 2 subid parameters in adDetail.asp, or 2 the password parameter in the login form...

CVE-2004-2340

UNVERIFIABLE SQL injection vulnerability in PunkBuster Screenshot Database PB-DB Alpha 6 allows remote attackers to execute arbitrary SQL commands via the username and password fields of the login form. NOTE: the original vulnerability report contains several significant inconsistencies that make...

phpBB Login Form SQL Injection

Binary data 2411.prm...

CVE-2004-0336

LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail login form, which contains the path to the mail directory...

CVE-2002-0665

Macromedia JRun Administration Server allows remote attackers to bypass authentication on the login form via an extra slash / in the URL...

CVE-2002-0878

SQL injection vulnerability in the login form for LogiSense software including 1 Hawk-i Billing, 2 Hawk-i ASP and 3 DNS Manager allows remote attackers to bypass authentication via SQL code in the password field...