Sql injection

SQL injection vulnerability in admindefault.asp in DUGallery 2.x allows remote attackers to execute arbitrary SQL commands via the 1 Login or 2 password field...

CVE-2006-2302: Undefined Security Weakness

SQL injection vulnerability in admindefault.asp in DUGallery 2.x allows remote attackers to execute arbitrary SQL commands via the 1 Login or 2 password field...

CVE-2005-4669: Undefined Security Weakness

SQL injection vulnerability in RT Internet Solutions RTIS WebAdmin allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

Sql injection

SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the 1 calid parameter in calendar.php3 and the 2 password field on the login page...

CVE-2005-4453

UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original 1 pUseruserid and 2 Useruserid parameters to UserProfile.aspx, then modifying the password field...

CVE-2005-4356: Undefined Security Weakness

SQL injection vulnerability in UStore allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-3290

SQL injection vulnerability in Accelerated Mortgage Manager allows remote attackers to execute arbitrary SQL commands via the password field...

CVE-2005-3290

SQL injection vulnerability in Accelerated Mortgage Manager allows remote attackers to execute arbitrary SQL commands via the password field...

CVE-2005-3290: Undefined Security Weakness

SQL injection vulnerability in Accelerated Mortgage Manager allows remote attackers to execute arbitrary SQL commands via the password field...

CVE-2004-2334

Multiple cross-site scripting XSS vulnerabilities in EMU Webmail 5.2.7 allow remote attackers to inject arbitrary web script or HTML via 1 a hex-encoded value to the variable parameter in emumail.fcgi, 2 the folder parameter in emumail.fcgi, or Javascript in the 3 username or 4 password field in...

CVE-2002-1720: Undefined Security Weakness

SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field...

CVE-2002-1699: Undefined Security Weakness

SQL injection vulnerability in ASP Client Check ASPCC 1.3 and 1.5 allows remote attackers to bypass authentication and gain unauthorized access via the password field...

CVE-2005-1834: Undefined Security Weakness

SQL injection vulnerability in login.asp in NEXTWEB iSite allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field...

PT-2005-2234 · Ecommpro · Ecommpro

Name of the Vulnerable Software and Affected Versions: EcommPro version 3.0 Description: The issue allows remote attackers to execute arbitrary SQL commands via the password field in the login.asp file. This can potentially lead to unauthorized access and data manipulation. Recommendations: For...

CVE-2005-1221: Undefined Security Weakness

SQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers to execute arbitrary SQL commands via the password field...

CVE-2005-0423: Undefined Security Weakness

SQL injection vulnerability in login.asp in ASPjar Guestbook allows remote attackers to execute arbitrary SQL commands via the password field...

CVE-2004-1208

Buffer overflow in Orbz 2.10 and earlier allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long password field in a join request...

Buffer-overflow in Orbz 2.10

Luigi Auriemma Application: Orbz http://www.21-6.com/orbz.asp Versions: = 2.10 Platforms: Windows, Linux and Mac Bug: buffer-overflow Exploitation: remote, versus server Date: 29 November 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2...

Fedora Core 1 : samba-3.0.6-2.FC1 (2004-284)

Wed Aug 25 2004 Jay Fenlason 3.0.6-1.FC2 - Upgrade to 3.0.6 include the following patches: samba-3.0.5rc1-passwd.patch from me. This changes the character used in the password field of the entries generated by winbind from a 'x' to a ''. 'x' means something special 'password is in /etc/shadow' to...

Advanced Guestbook 2.2 - Password SQL Injection

Advanced Guestbook 2.2 - Password SQL Injection source: https://www.securityfocus.com/bid/10209/info It has been reported that Advanced Guestbook is prone to a SQL injection vulnerability that could allow an attacker to gain administrative access to the application. This issue is reported to exis...