OS4E - login.asp SQL Injection

OS4E - login.asp SQL Injection source: https://www.securityfocus.com/bid/13804/info os4e is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL query. Successful...

OS4E - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/13804/info os4e is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL query. Successful exploitation could result in a...

CVE-2005-1750

The CVE-2005-1750 issue affects ezdwc NewsletterEz 3.0 and is a SQL injection in login.asp via the password parameter. The root cause is improper handling of the password input in login.asp, enabling arbitrary SQL execution. Practical impact is remote arbitrary SQL execution against the applicati...

Active News Manager - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/13759/info Active News Manager is prone to an SQL injection vulnerability. This issue affects the 'login.asp' script. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to...

Active News Manager - login.asp SQL Injection

Active News Manager - login.asp SQL Injection source: https://www.securityfocus.com/bid/13759/info Active News Manager is prone to an SQL injection vulnerability. This issue affects the 'login.asp' script. Successful exploitation could result in a compromise of the application, disclosure or...

CVE-2005-1750: Undefined Security Weakness

SQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2005-1602: Undefined Security Weakness

SQL injection vulnerability in login.asp for Net56 Browser Based File Manager 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field...

CVE-2003-1157: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inject arbitrary web script or HTML via the NFuseMessage parameter...

CVE-2005-1429

CVE-2005-1429 describes a SQL injection vulnerability in login.asp of WWWguestbook 1.1. The vulnerability arises from unsafely handling the password parameter, allowing remote attackers to execute arbitrary SQL commands. Affects the WWWguestbook 1.1 web application (login.asp) and could enable un...

CVE-2005-1429

SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2005-1429: Undefined Security Weakness

SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2005-1292

Multiple cross-site scripting XSS vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to 1 tellAFriend.asp or 2 addToWishlist.asp, redirect parameter to 3 access.asp or 4 login.asp, message parameter to 5 login.asp or 6...

CVE-2005-1364: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MetaBid Auctions allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password fields in logIn.asp, or 3 intAuctionID parameter to item.asp...

CVE-2005-1292

Multiple cross-site scripting XSS vulnerabilities in CartWIZ ASP Cart allow remote attackers to inject arbitrary web script or HTML via the idProduct parameter to 1 tellAFriend.asp or 2 addToWishlist.asp, redirect parameter to 3 access.asp or 4 login.asp, message parameter to 5 login.asp or 6...

CartWIZ 1.10 - login.asp Message Argument Cross-Site Scripting

CartWIZ 1.10 - login.asp Message Argument Cross-Site Scripting source: https://www.securityfocus.com/bid/13341/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this...

CartWIZ 1.10 - 'login.asp' Redirect Argument Cross-Site Scripting

source: https://www.securityfocus.com/bid/13340/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

CartWIZ 1.10 - 'login.asp' Message Argument Cross-Site Scripting

source: https://www.securityfocus.com/bid/13341/info CartWIZ is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

CVE-2005-1221: Undefined Security Weakness

SQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers to execute arbitrary SQL commands via the password field...

CVE-2005-1149

CVE-2005-1149 is a SQL injection flaw in aspclick.it ACNews 1.0, affecting admin/login.asp where the (1) username and (2) password parameters are unsafely handled. The Red Hat advisory echoes the same description, indicating remote attackers could execute arbitrary SQL commands. The available doc...

CVE-2005-1149: Undefined Security Weakness

SQL injection vulnerability in admin/login.asp in aspclick.it ACNews 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameters...