DUWare DUgallery 3.0 - '/admin/edit.asp' Authentication Bypass

source: https://www.securityfocus.com/bid/36049/info DUgallery is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to gain unauthorized administrative access to the affected application. Successfully exploiting this issue will lead to other attacks. DUgallery 3....

CVE-2006-6191: Undefined Security Weakness

SQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

SimpleBlog <= 2.3 (admin/edit.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== SimpleBlog = 2.3 admin/edit.asp Remote SQL Injection Vulnerability ===================================================================== Title : simpleblog = v 2.3...

CVE-2006-2264

CVE-2006-2264 affects Ocean12 Calendar Manager Pro 1.00, with multiple SQL injection vulnerabilities that allow a remote attacker to execute arbitrary SQL commands via (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp. The explo...

CVE-2006-2264: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the 1 date parameter to admin/main.asp, 2 SearchFor parameter to admin/view.asp, or 3 ID parameter to admin/edit.asp. NOTE: the provenance of this information i...