CVE-2009-3532

LogRover

NatterChat Security Bypass Vulnerability

The host is running NatterChat and is prone to Security Bypass vulnerability. OpenVAS Vulnerability Test $Id: secpodnatterchatsecbypassvul.nasl 5122 2017-01-27 12:16:00Z teissa $ NatterChat Security Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod, http://www.secpod.co...

Sql injection

Multiple SQL injection vulnerabilities in login.asp in NatterChat 1.1 and 1.12 allow remote attackers to execute arbitrary SQL commands via the 1 txtUsername parameter aka Username and 2 txtPassword parameter aka Password in a form generated by home.asp. NOTE: due to lack of details, it is not...

CVE-2008-6950

Multiple SQL injection vulnerabilities in login.asp in Bankoi WebHosting Control Panel 1.20 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password field...

CVE-2008-6950

CVE-2008-6950 describes multiple SQL injection vulnerabilities in the login.asp of Bankoi WebHosting Control Panel 1.20. The issues allow remote attackers to inject SQL via the (1) username or (2) password fields, potentially leading to arbitrary SQL execution. Affected component is the login han...

CVE-2009-2619

SQL injection vulnerability in login.asp in DataCheck Solutions V-SpacePal allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-2619

DataCheck Solutions V-SpacePal is affected by an SQL injection in login.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The available documents consistently describe the issue without detailing exploit vectors, affected versions, or a conc...

Sql injection

SQL injection vulnerability in login.asp in DataCheck Solutions GalleryPal FE 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the 1 password parameter in 1.1 and 2 ppassword parameter in 1.5. NOTE: some of these details are obtained from third party information...

CVE-2008-6371

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username Username parameter...

Sql injection

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6371

Ocean12 Membership Manager Pro is affected by an SQL injection in login.asp triggered by the Username parameter. The vulnerability arises from insufficient sanitization of user-supplied data, enabling remote attackers to craft input that causes arbitrary SQL execution. This aligns with multiple r...

CVE-2008-6390

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6329

SQL injection vulnerability in Employee/login.asp in Pre ASP Job Board allows remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password parameters, as reachable from Employee/emplogin.asp. NOTE: some of these details are obtained from third party information...

CVE-2008-6329

The CVE-2008-6329 entry concerns a SQL injection vulnerability in Pre ASP Job Board, reported in Employee/login.asp (and reachable from Employee/emp_login.asp). The vulnerability is triggered by the Username and Password parameters, allowing remote attackers to execute arbitrary SQL commands. The...

CVE-2009-0741

An active CVE entry (CVE-2009-0741) describes an SQL injection vulnerability in Craft Silicon Banking@Home 2.1 and earlier. The affected component is Login.asp, and the vulnerability is exploitable via the LoginName parameter to allow remote attackers to execute arbitrary SQL commands. This is th...

LDF - login.asp SQL Injection

LDF - login.asp SQL Injection source: https://www.securityfocus.com/bid/33431/info LDF is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Lootan - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/33439/info Lootan is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

Lootan - login.asp SQL Injection

Lootan - login.asp SQL Injection source: https://www.securityfocus.com/bid/33439/info Lootan is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Sql injection

Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the 1 login parameter aka user field or the 2 password parameter aka pass field. NOTE: some of these details are obtained from third party information...