CVE-2011-2151: Undefined Security Weakness

The 1 Admin/frmEmailReportSettings.aspx, 2 Admin/frmGeneralSettings.aspx, 3 Admin/frmSite.aspx, 4 Client/frmUser.aspx, and 5 Login.aspx components in the SmarterTools SmarterStats 6.0 web server accept cleartext passwords, which makes it easier for remote attackers to obtain sensitive information...

CVE-2009-2612

CVE-2009-2612 describes an SQL injection in ProSMDR’s login.aspx via the txtUser parameter, enabling remote execution of arbitrary SQL commands. Multiple sources (NVD, Red Hat, CVE records) confirm the vulnerability exists and references to third-party provenance (no vendor-supplied exploit detai...

CVE-2009-2612: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.aspx in ProSMDR allows remote attackers to execute arbitrary SQL commands via the txtUser parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0281

The CVE-2009-0281 entry describes an SQL injection vulnerability in the WarHound Walking Club’s login.aspx, exploitable via the (1) username and (2) password parameters. The underlying issue allows remote attackers to attempt arbitrary SQL commands. The provided documents do not specify affected ...

Sql injection

Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute arbitrary SQL commands via the 1 password and 2 username fields...

Sql injection

SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2008-5974

CVE-2008-5974 affects Active Price Comparison 4.0, where the login.aspx page is vulnerable to SQL injection via the (1) username and (2) password fields. The root cause is improper handling of user input in the login form, allowing remote attackers to execute arbitrary SQL commands. The available...

CVE-2008-5973

The CVE-2008-5973 entry describes an SQL injection vulnerability in Active Web Mail 4.0 (login.aspx) that allows an attacker to execute arbitrary SQL commands via the password parameter. Affected component: login form handling in Active Web Mail 4.0. Root cause: improper sanitization of input lea...

CVE-2009-0281: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.aspx in WarHound Walking Club allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2008-5974: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute arbitrary SQL commands via the 1 password and 2 username fields...

CVE-2008-5973: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2004-2587: Undefined Security Weakness

login.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service via a long txtusername parameter, possibly due to a buffer overflow...