CVE-2018-18832: Improper Neutralization of Special Elements used in an SQL Command

admin/check.asp in DKCMS 9.4 allows SQL Injection via an ASPSESSIONID cookie to admin/admin.asp...

PT-2018-14681

Name of the Vulnerable Software and Affected Versions DKCMS version 9.4 Description The issue allows SQL Injection via an ASPSESSIONID cookie to admin/admin.asp. This is related to the admin/check.asp file in DKCMS. Recommendations For DKCMS version 9.4, consider restricting access to the...

ESCMS vulnerability website system 0day-vulnerability warning-the black bar safety net

Version:ESCMS V1. 0 SP1 Build 1 1 2 5 Background login authentication is through the admin/check. asp achieved,look at the code % if Request. cookiesCookiesKey"ESadmin"="" then 'Note that here Oh,he is by COOKIE validation ESadmin is empty,we can forge a value,called he is not empty 'CookiesKey i...

CVE-2006-5591

Multiple SQL injection vulnerabilities in Admin/check.asp in PacPoll 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uid and 2 pwd parameters...

CVE-2006-5591

CVE-2006-5591 affects PacPoll 4.0 (and earlier). The vulnerability is SQL injection in Admin/check.asp, exploitable via the uid and pwd parameters, allowing remote attackers to execute arbitrary SQL commands. The affected component is the Admin/check.asp script in PacPoll 4.0 and earlier; root ca...

CVE-2006-5591: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Admin/check.asp in PacPoll 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uid and 2 pwd parameters...