14 matches found
EUVD-2006-1587
Malware in sbrugna...
EUVD-2005-1576
Malware in sbrugna...
EUVD-2005-1416
Malware in sbrugna...
ISP Site Man 0 Admin_Login.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17347/info Site Man is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow ...
Damailinglist List System V2.1 Authorization Bypass Vulnerability
Exploit for asp platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
CVE-2008-5888
Multiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 hitcounter.asp, 2 userdelete.asp, and 3 userupdate.asp; 4 the userid parameter to adminlogin.asp aka the USERNAME field in admin.asp; and 5 the PassWord paramete...
CVE-2006-5976
Multiple SQL injection vulnerabilities in adminlogin.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password field. NOTE: some of these details are obtained from third party information...
CVE-2006-5976
CVE-2006-5976 describes multiple SQL injection vulnerabilities in BlogMe 3.0 affecting the admin_login.asp page. The vulnerability allows remote attackers to insert or modify SQL statements through the (1) Username or (2) Password fields, enabling arbitrary SQL execution. This is a remote, unauth...
MGinternet Property Site Manager - 'admin_login.asp' Multiple SQL Injections
source: https://www.securityfocus.com/bid/21073/info MGinternet Property Site Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issu...
CVE-2006-1586
CVE-2006-1586 concerns a SQL injection in the admin_login.asp script of ISP of Egypt SiteMan, exploitable via the pass parameter to allow remote execution of arbitrary SQL commands. The vulnerability affects the login-related functionality and arises from improper handling of input in the pass pa...
CVE-2006-1586
SQL injection vulnerability in adminlogin.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL commands via the pass parameter...
SiteMan <= All version SQL injection in admin_login.asp
Vendor : SiteMan Target Page : adminlogin.asp Bug Finder : S3rv3rhack3r administrator panel demo: http://www.ispdemos.com/Demo/SiteMan/adminlogin.asp WWW : http://www.ispofegypt.com/ you can login to adminlogin.asp with user : admin pass : ' or '...
CVE-2005-1573
Vulnerability summary (CVE-2005-1573) : The issue affects the ASP Virtual News Manager, specifically the admin_login.asp endpoint. It is a SQL injection vulnerability that allows remote attackers to craft input via the password parameter to execute arbitrary SQL commands on the backend database. ...
CVE-2005-1573
SQL injection vulnerability in adminlogin.asp for ASP Virtual News Manager allows remote attackers to execute arbitrary SQL commands via the password parameter...