CVE-2008-6646: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in CoronaMatrix phpAddressBook 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2008-6624

SQL injection vulnerability in getin.php in WEBBDOMAIN Petition 1.02, 2.0, and 3.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-6623: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in getin.php in WEBBDOMAIN Post Card aka Web Postcards 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-6626: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in getin.php in WEBBDOMAIN Quiz 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-1247: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-6625: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in getin.php in WEBBDOMAIN Polls aka Poll 1.0 and 1.01 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-6627: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in getin.php in WEBBDOMAIN WebShop 1.2, 1.1, 1.02, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-6624: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in getin.php in WEBBDOMAIN Petition 1.02, 2.0, and 3.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...

CVE-2008-6582: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Miniweb 2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action...

Authentication flaw

login.php in CelerBB 0.0.2, when magicquotesgpc is disabled, allows remote attackers to bypass authentication and obtain administrative access via special characters in the Username parameter, as demonstrated by an admin' parameter value...

CVE-2008-6396: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in account.php in Celerondude Uploader 6.1 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username Username parameter...

CVE-2008-6391

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username user parameter...

CVE-2008-6371

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username Username parameter...

Sql injection

SQL injection vulnerability in main.asp in Jbook allows remote attackers to execute arbitrary SQL commands via the username user parameter...

CVE-2008-6371

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username Username parameter...

CVE-2008-6371: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.asp in Ocean12 Membership Manager Pro allows remote attackers to execute arbitrary SQL commands via the username Username parameter...

CVE-2009-0750: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in the smNews example script for txtSQL 2.2 Final allows remote attackers to execute arbitrary SQL commands via the username parameter...