CVE-2021-37413: Improper Neutralization of Special Elements used in an SQL Command

GRANDCOM DynWEB before 4.2 contains a SQL Injection vulnerability in the admin login interface. A remote unauthenticated attacker can exploit this vulnerability to obtain administrative access to the webpage, access the user database, modify web content and upload custom files. The backend login...

PT-2022-10653

Name of the Vulnerable Software and Affected Versions GRANDCOM DynWEB versions prior to 4.2 Description The issue allows a remote unauthenticated attacker to exploit a SQL Injection vulnerability in the admin login interface. This can lead to obtaining administrative access to the webpage,...

XtremeASP PhotoGallery 2.0 - 'Adminlogin.asp' SQL Injection

source: https://www.securityfocus.com/bid/9438/info XtremeASP PhotoGallery is prone to an SQL injection vulnerability. The issue is reported to exist in the administration login interface, which does not sufficiently sanitize user-supplied input for username and password values before including i...