CVE-2007-0582: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in default.asp in ChernobiLe 1.0 allows remote attackers to execute arbitrary SQL commands via the User username field...

CVE-2006-5628: Undefined Security Weakness

SQL injection vulnerability in login.asp in UNISOR Content Management System CMS allows remote attackers to execute arbitrary SQL commands via the 1 user or 2 pass fields...

Sql injection

SQL injection vulnerability in authent.php4 in Nicolas Fischer aka NFec RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the User field...

CVE-2006-1954: Undefined Security Weakness

SQL injection vulnerability in authent.php4 in Nicolas Fischer aka NFec RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the User field...

PT-2006-2938 · Unknown · Rechnungszentrale V2

Name of the Vulnerable Software and Affected Versions: RechnungsZentrale V2 versions 1.1.3 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the SQL injection vulnerability in the authent.php4 file, specifically via the Us...

cubecartXSS.txt

CubeCart 3.0.7-pl1 multiple variable Cross site scripting Vendor url: www.cubecart.com bug report:http://bugs.cubecart.com/?do=details&id=459 Advisore:http://lostmon.blogspot.com/2006/01/ cubecart-307-pl1-indexphp-multiple.html. vendor notify:yes exploit avalable: yes I recomended to all vendors ...

CVE-2005-3046: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in password.php in PhpMyFaq 1.5.1 allows remote attackers to modify SQL queries and gain administrator privileges via the user field...

CVE-2005-2632

SQL injection vulnerability in loginadminmediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the User field...

CVE-2005-2632: Undefined Security Weakness

SQL injection vulnerability in loginadminmediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the User field...

CVE-2005-2478: Undefined Security Weakness

SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel...

CVE-2005-1212

Buffer overflow in Microsoft Step-by-Step Interactive Training orun32.exe allows remote attackers to execute arbitrary code via a bookmark link file .cbo, cbl, or .cbm extension with a long User field...

CVE-2005-1212: Undefined Security Weakness

Buffer overflow in Microsoft Step-by-Step Interactive Training orun32.exe allows remote attackers to execute arbitrary code via a bookmark link file .cbo, cbl, or .cbm extension with a long User field...

CVE-2005-1302

SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field...

CVE-2005-1302: Undefined Security Weakness

SQL injection vulnerability in Confixx 3.08 and earlier allows remote attackers to execute arbitrary SQL commands via the "change user" field...

CVE-2005-0930: Undefined Security Weakness

Cross-site scripting XSS vulnerability in message.php in Chatness 2.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via 1 the user field or 2 the message parameter to message.php...

Personal FTP Server

--------------------------------------- Product : Personal FTP Server Version : ? OSystem : Windows Authors : CoolSoft WebSite : http://www.cooolsoft.com Problem : Buffer Overflow in field USER --------------------------------------- Description: ------------ rus: ==== Переполнение буфера...