CVE-2014-4313

SQL injection vulnerability in Epicor Procurement before 7.4 SP2 allows remote attackers to execute arbitrary SQL commands via the User field...

CVE-2014-4313

SQL injection vulnerability in Epicor Procurement before 7.4 SP2 allows remote attackers to execute arbitrary SQL commands via the User field...

DEBIAN-CVE-2011-2688

SQL injection vulnerability in mysql/mysql-auth.pl in the modauthnzexternal module 3.2.5 and earlier for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the user field...

Sql injection

SQL injection vulnerability in mysql/mysql-auth.pl in the modauthnzexternal module 3.2.5 and earlier for the Apache HTTP Server allows remote attackers to execute arbitrary SQL commands via the user field...

PT-2011-4029 · Apache +1 · Mod Authnz External +2

Name of the Vulnerable Software and Affected Versions: mod authnz external module versions 3.2.5 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands via the user field. This is related to a SQL injection vulnerability in the mysql/mysql-auth.pl script. The...

Sql injection

Multiple SQL injection vulnerabilities in login.php in MOC Designs PHP News 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 newsuser parameter User field and 2 newspassword parameter Password field...

CVE-2008-6484

SQL injection vulnerability in login.php in Mole Group Taxi Map Script aka Taxi Calc Dist Script allows remote attackers to execute arbitrary SQL commands via the user field...

Sql injection

SQL injection vulnerability in login.php in Mole Group Taxi Map Script aka Taxi Calc Dist Script allows remote attackers to execute arbitrary SQL commands via the user field...

CVE-2008-6484

SQL injection vulnerability in login.php in Mole Group Taxi Map Script aka Taxi Calc Dist Script allows remote attackers to execute arbitrary SQL commands via the user field...

CVE-2008-5926

Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the 1 login parameter aka user field or the 2 password parameter aka pass field. NOTE: some of these details are obtained from third party information...

PT-2009-1304 · Web Scribble Solutions · Webclassifieds

Name of the Vulnerable Software and Affected Versions: Web Scribble Solutions webClassifieds 2005 Description: The issue concerns SQL injection vulnerabilities in the index.php file of webClassifieds 2005. Remote attackers can execute arbitrary SQL commands by manipulating the user and password...

Sql injection

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...

Design/Logic Flaw

Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible" characters in the userinfo subcomponent of the authority component of the URL aka the user field, as demonstrated by %E3%80%80 sequences...

Sql injection

SQL injection vulnerability in default.asp in ChernobiLe 1.0 allows remote attackers to execute arbitrary SQL commands via the User username field...

CVE-2007-0582

SQL injection vulnerability in default.asp in ChernobiLe 1.0 allows remote attackers to execute arbitrary SQL commands via the User username field...

Sql injection

SQL injection vulnerability in authent.php4 in Nicolas Fischer aka NFec RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the User field...

PT-2006-2938 · Unknown · Rechnungszentrale V2

Name of the Vulnerable Software and Affected Versions: RechnungsZentrale V2 versions 1.1.3 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the SQL injection vulnerability in the authent.php4 file, specifically via the Us...

cubecartXSS.txt

CubeCart 3.0.7-pl1 multiple variable Cross site scripting Vendor url: www.cubecart.com bug report:http://bugs.cubecart.com/?do=details&id=459 Advisore:http://lostmon.blogspot.com/2006/01/ cubecart-307-pl1-indexphp-multiple.html. vendor notify:yes exploit avalable: yes I recomended to all vendors ...

CVE-2005-2632

SQL injection vulnerability in loginadminmediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the User field...

CVE-2005-1212

Buffer overflow in Microsoft Step-by-Step Interactive Training orun32.exe allows remote attackers to execute arbitrary code via a bookmark link file .cbo, cbl, or .cbm extension with a long User field...