CVE-2008-6964

SQL injection vulnerability in the login page in X7 Chat 2.0.5 allows remote attackers to execute arbitrary SQL commands via the password field...

CVE-2008-6941

SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field...

CVE-2008-6798

Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via 1 the us parameter aka the Username field or 2 the ps parameter aka the Password field...

Sql injection

Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via 1 the us parameter aka the Username field or 2 the ps parameter aka the Password field...

Sql injection

Multiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote attackers to execute arbitrary SQL commands via 1 the loginname parameter aka the username field or 2 the loginpw parameter aka the password field...

CVE-2008-6614

Multiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design IBD Micro CMS 3.5 aka 0.3.5 allow remote attackers to execute arbitrary SQL commands via 1 the administratorsusername parameter aka the Username field or 2 the administratorspass parameter aka the Password fie...

Sql injection

Multiple SQL injection vulnerabilities in DMXReady Online Notebook Manager 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password field. NOTE: some third parties report inability to verify this issue...

CVE-2009-0252

Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arbitrary SQL commands via the 1 Login parameter aka username field or the 2 Password parameter aka password field. NOTE: some of these details are obtained from third party...

Sql injection

Multiple SQL injection vulnerabilities in admin/usercheck.php in FlexPHPNews 0.0.6 allow remote attackers to execute arbitrary SQL commands via the 1 checkuser parameter aka username field or 2 checkpass parameter aka password field to admin/index.php. NOTE: some of these details are obtained fro...

PT-2009-1304 · Web Scribble Solutions · Webclassifieds

Name of the Vulnerable Software and Affected Versions: Web Scribble Solutions webClassifieds 2005 Description: The issue concerns SQL injection vulnerabilities in the index.php file of webClassifieds 2005. Remote attackers can execute arbitrary SQL commands by manipulating the user and password...

PHPLD 3.3 - Blind SQL Injection

PHPLD 3.3 - Blind SQL Injection phpLD 3.3 Blind SQL Injection http://www.phplinkdirectory.com/ magicquotesgpc = Off registerglobals = On Vulnerable: GET http://site/phpld/page.php?name= True Request: validpagename' or 1=1 False Request: validpagename' or 1=0 Try this urlencode: validpagename' or...

Sql injection

SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the 1 txtusername parameter aka username field or the 2 txtpassword parameter aka password field. NOTE: some of these details are obtained from third party...

CVE-2008-5433

Cross-site scripting XSS vulnerability in login.php in PunBB 1.3 and 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the password field...

CVE-2008-1005

WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password...

CVE-2008-1005

WebCore, as used in Apple Safari before 3.1, does not properly mask the password field when reverse conversion is used with the Kotoeri input method, which allows physically proximate attackers to read the password...

CVE-2008-1005

CVE-2008-1005 affects Apple Safari (WebCore) prior to 3.1. The issue is that the password field is not properly masked during reverse conversion with the Kotoeri input method, allowing physically proximate attackers to read the password. The related connected material confirms Safari 3.1 addresse...

lotfian-sqlxss.txt

Aria-Security Team http://Aria-Security.Net ---------------------------------------- Lotfian Brochure and cataloge Script XSS And SQL Injection Original Advisory @ http://aria-security.net/forum/showthread.php?p=1135 Username/Password Field can run SQL Queries, For Example I got these:...

CVE-2007-6091

Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System JBS 2.0, and possibly JiRo's Upload Manager aka JiRo's Upload System or JUS, allow remote attackers to execute arbitrary SQL commands via the 1 Username aka Login or Email or 2 Password field...

Sql injection

SQL injection vulnerability in adminconsole/index.asp in Gallery In A Box allows remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password field. NOTE: these fields might be associated with the txtUsername and txtPassword parameters...

Sql injection

SQL injection vulnerability in admin/index.php in Inmostore 4.0 allows remote attackers to execute arbitrary SQL commands via the Password field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...