CVE-2005-1250

The CVE-2005-1250 entry describes a SQL injection in Ipswitch WhatsUp Professional 2005 SP1, targeting the web front end (NmConsole/Login.asp). The vulnerability allows remote attackers to submit crafted input in the User Name (sUserName) or Password (sPassword) fields, potentially yielding arbit...

Ipswitch WhatsUp Professional 2005 SP1 - login.asp SQL Injection

Ipswitch WhatsUp Professional 2005 SP1 - login.asp SQL Injection source: https://www.securityfocus.com/bid/14039/info WhatsUp Professional is prone to an SQL injection vulnerability affecting its Web-based front end. This issue is due to a failure in the application to properly sanitize...

CVE-2005-1250: Undefined Security Weakness

SQL injection vulnerability in the logon screen of the web front end NmConsole/Login.asp for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the 1 User Name field sUserName parameter or 2 Password sPassword parameter...

Ipswitch WhatsUp Professional 2005 SP1 - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/14039/info WhatsUp Professional is prone to an SQL injection vulnerability affecting its Web-based front end. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL...

CVE-2005-2035

CVE-2005-2035 concerns SQL injection in the login.asp of Cool Cafe (Cool Café) Chat 1.2.1. The vulnerability lets remote attackers run arbitrary SQL commands through the password field, enabling potential authentication bypass or data access. Affected product: Cool Cafe Chat 1.2.1; vulnerable com...

CVE-2005-2035: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.asp for Cool Cafe Cool Café Chat 1.2.1 allows remote attackers to execute arbitrary SQL commands via the password...

Cool Cafe Chat 1.2.1 - login.asp SQL Injection

Cool Cafe Chat 1.2.1 - login.asp SQL Injection source: https://www.securityfocus.com/bid/13976/info Cool Cafe Chat is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an...

CVE-2005-1906

SQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute arbitrary SQL commands via the password. NOTE: there is little public information about this product and its vendor, and the original researcher announcement is no longer available...

CVE-2005-1910: Undefined Security Weakness

SQL injection vulnerability in login.asp for WWWeb Concepts Events System 1.0 allows remote attackers to execute arbitrary SQL commands via the password...

CVE-2005-1906: Undefined Security Weakness

SQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute arbitrary SQL commands via the password. NOTE: there is little public information about this product and its vendor, and the original researcher announcement is no longer available...

CVE-2005-1904: Undefined Security Weakness

SQL injection vulnerability in login.asp in JiRo's Upload System JUS 1 allows remote attackers to execute arbitrary SQL commands via the password parameter...

WWWeb Concepts Events System 1.0 - login.asp SQL Injection

WWWeb Concepts Events System 1.0 - login.asp SQL Injection source: https://www.securityfocus.com/bid/13859/info WWWeb Concepts Events System is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp'...

CVE-2005-1834

The CVE-2005-1834 entry describes a SQL injection vulnerability in NEXTWEB (i)Site, specifically in login.asp. The underlying issue is unsanitized input in the password field, enabling remote attackers to execute arbitrary SQL commands and bypass authentication. The available connected documents ...

CVE-2005-1834: Undefined Security Weakness

SQL injection vulnerability in login.asp in NEXTWEB iSite allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field...

CVE-2005-1805

CVE-2005-1805 describes an SQL injection in the login.asp of OS4E (Online Solutions for Educators). The vulnerability involves the password parameter being unsafely handled, allowing remote attackers to manipulate SQL commands and potentially access or modify data. The affected product is cited a...

Livingcolor Livingmailing 1.3 - login.asp SQL Injection

Livingcolor Livingmailing 1.3 - login.asp SQL Injection source: https://www.securityfocus.com/bid/13836/info livingmailing is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script. livingmailin...

CVE-2005-1805: Undefined Security Weakness

SQL injection vulnerability in login.asp in an unknown product by Online Solutions for Educators OS4E allows remote attackers to execute arbitrary SQL commands via the password...

CVE-2005-1780: Undefined Security Weakness

SQL injection vulnerability in admin/login.asp in Active News Manager allows remote attackers to execute arbitrary SQL commands via the password...

CVE-2005-1785: Undefined Security Weakness

SQL injection vulnerability in ad/login.asp in ZonGG 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter...

PT-2005-2772 · Os4E · Unknown Product

Name of the Vulnerable Software and Affected Versions: Unknown product by Online Solutions for Educators OS4E affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the password variable in the login.asp file. This could potentially le...