CVE-2011-5230

Seotoaster 1.9 and earlier is affected by SQL injection in the LoginModel::selectUserIdByLoginPass function. The vulnerabilities allow remote attackers to execute arbitrary SQL commands via (1) the login parameter to sys/login/index or (2) the memberLoginName parameter to sys/login/member. Affect...

CVE-2011-5230: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the selectUserIdByLoginPass function in seotoastercore/application/models/LoginModel.php in Seotoaster 1.9 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 login parameter to sys/login/index or 2 memberLoginName parameter to...

PT-2012-2207

Name of the Vulnerable Software and Affected Versions Seotoaster versions 1.9 and earlier Description The issue concerns SQL injection vulnerabilities in the selectUserIdByLoginPass function. Remote attackers can execute arbitrary SQL commands via the login parameter to "sys/login/index" or the...

Seotoaster SQL-Injection Admin Login Bypass

Advisory: Seotoaster SQL-Injection Admin Login Bypass Advisory ID: INFOSERVE-ADV2011-06 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Seotoaster v.1.9 Vendor URL: http://www.seotoaster.com/ Vendor Status: fixed ==========================...

Seotoaster SQL injection background login authentication to bypass the defect and repair-vulnerability warning-the black bar safety net

Seotoaster SQL-Injection Admin Login Bypass Author Stefan Schurtz www.badguest.cn [email protected] Affected Software: Successfully tested on Seotoaster v. 1. 9 Developer: http://www.seotoaster.com/ Problem status:repair Defect description ========================== Seotoaster v. 1. 9 containi...

Seotoaster 1.9 SQL Injection

Advisory: Seotoaster SQL-Injection Admin Login Bypass Advisory ID: INFOSERVE-ADV2011-06 Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Seotoaster v.1.9 Vendor URL: http://www.seotoaster.com/ Vendor Status: fixed ==========================...

Seotoaster SQL Injection Admin Login Bypass

Exploit for php platform in category web applications Advisory: Seotoaster SQL-Injection Admin Login Bypass Author: Stefan Schurtz Contact: email protected Affected Software: Successfully tested on Seotoaster v.1.9 Vendor URL: http://www.seotoaster.com/ Vendor Status: fixed...

Seotoaster - SQL Injection

Seotoaster - SQL Injection Advisory: Seotoaster SQL-Injection Admin Login Bypass Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Seotoaster v.1.9 Vendor URL: http://www.seotoaster.com/ Vendor Status: fixed ========================== Vulnerability...

Seotoaster - SQL Injection

Advisory: Seotoaster SQL-Injection Admin Login Bypass Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on Seotoaster v.1.9 Vendor URL: http://www.seotoaster.com/ Vendor Status: fixed ========================== Vulnerability Description...