PT-2022-10653

Name of the Vulnerable Software and Affected Versions GRANDCOM DynWEB versions prior to 4.2 Description The issue allows a remote unauthenticated attacker to exploit a SQL Injection vulnerability in the admin login interface. This can lead to obtaining administrative access to the webpage,...

CVE-2021-37413: Improper Neutralization of Special Elements used in an SQL Command

GRANDCOM DynWEB before 4.2 contains a SQL Injection vulnerability in the admin login interface. A remote unauthenticated attacker can exploit this vulnerability to obtain administrative access to the webpage, access the user database, modify web content and upload custom files. The backend login...

XtremeASP PhotoGallery 2.0 - 'Adminlogin.asp' SQL Injection

source: https://www.securityfocus.com/bid/9438/info XtremeASP PhotoGallery is prone to an SQL injection vulnerability. The issue is reported to exist in the administration login interface, which does not sufficiently sanitize user-supplied input for username and password values before including i...