289 matches found
CVE-2005-0925: Undefined Security Weakness
Cross-site scripting XSS vulnerability in login.asp for Ublog Reload 1.0 through 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2005-0423
ASPjar Guestbook is affected by a SQL injection in login.asp that allows remote attackers to execute arbitrary SQL commands via the password field. The vulnerability is documented in multiple sources (e.g., NVD and OpenVAS entries) with the same basic vector (unvalidated input in login form). The...
CVE-2005-0423: Undefined Security Weakness
SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands via the password field...
CVE-2004-0236
CVE-2004-0236 concerns a SQL injection in login.asp of thePHOTOtool, allowing remote attackers to gain unauthorized access via the password field. The vulnerability is described across multiple sources (NVD/CVE databases) with a high impact and remote exploitation potential. Connected documents c...
CVE-2004-0236: Undefined Security Weakness
SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the password field...
LaGarde StoreFront 5.0 Shopping Cart - login.asp SQL Injection
LaGarde StoreFront 5.0 Shopping Cart - login.asp SQL Injection source: https://www.securityfocus.com/bid/13998/info StoreFront Shopping Cart is affected by an SQL injection vulnerability. The vulnerability affects the 'login.asp' script. Successful exploitation could result in a compromise of the...
LaGarde StoreFront 5.0 Shopping Cart - 'login.asp' SQL Injection
source: https://www.securityfocus.com/bid/13998/info StoreFront Shopping Cart is affected by an SQL injection vulnerability. The vulnerability affects the 'login.asp' script. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit...
CVE-2003-0557: Undefined Security Weakness
SQL injection vulnerability in login.asp for StoreFront 6.0, and possibly earlier versions, allows remote attackers to obtain sensitive user information via SQL statements in the password field...
CVE-2003-0522: Undefined Security Weakness
Multiple SQL injection vulnerabilities in ProductCart 1.5 through 2 allow remote attackers to 1 gain access to the admin control panel via the idadmin parameter to login.asp or 2 gain other privileges via the Email parameter to Custva.asp...