CVE-2006-6790: Undefined Security Weakness

Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board UPB 2.0b1 and earlier allows remote attackers to inject arbitrary PHP code via the username parameter, which is injected into chat/text.php...

Ultimate PHP Board chat/login.php username Parameter Script Injection

Binary data 3872.prm...

CVE-2006-6399: Undefined Security Weakness

SQL injection vulnerability in Superfreaker Studios UPublisher 1.0 allows remote attackers to execute arbitrary SQL commands via the Username parameter in login.asp. NOTE: the provenance of this information is unknown; details are obtained from third party sources...

CVE-2006-6260

SQL injection vulnerability in login.asp in Redbinaria Sistema Integrado de Administracion de Portales SIAP allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-6260: Undefined Security Weakness

SQL injection vulnerability in login.asp in Redbinaria Sistema Integrado de Administracion de Portales SIAP allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-5655

SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-5655: Undefined Security Weakness

SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-5662

SQL injection vulnerability in easy notesManager eNM 0.0.1 allows remote attackers to execute arbitrary SQL commands via 1 the username parameter in login.php and 2 a search on the "search page."...

CVE-2006-5662: Undefined Security Weakness

SQL injection vulnerability in easy notesManager eNM 0.0.1 allows remote attackers to execute arbitrary SQL commands via 1 the username parameter in login.php and 2 a search on the "search page."...

CVE-2006-4836: Undefined Security Weakness

SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: The lostpassword.php and calendar.php vectors are already covered by CVE-2005-3365, and the search.php vector is already covered by CVE-2005-42...

CVE-2006-4705: Undefined Security Weakness

SQL injection vulnerability in login.php in dwayner79 and Dominic Gamble Timesheet aka Timesheet.php 1.2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-4087

CVE-2006-4087 describes a cross-site scripting (XSS) vulnerability in the admin.cgi component of mojoGallery (mojoscripts.com). The issue allows remote attackers to inject arbitrary web script or HTML through the username parameter. The NVD records a CVSSv2 base score of 4.3 (medium severity), wi...

CVE-2006-4087: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-4047: Undefined Security Weakness

SQL injection vulnerability in index.php in Netious CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-3904: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in manager/index.php in Etomite CMS 0.6.1 and earlier, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-2911

SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-2911: Undefined Security Weakness

SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-2990: Undefined Security Weakness

Cross-site scripting XSS vulnerability in default.asp in VanillaSoft Helpdesk 2005 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2006-2912

Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via the 1 albumID parameter to a viewalbum.php or b index.php, 2 imageID parameter to c popup.php, or 3 username and 4 password parameters to d admin/member.php...

Cross site scripting

Cross-site scripting XSS vulnerability in admin.php in Particle Links 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter...