EUVD-2006-1587

Malware in sbrugna...

EUVD-2005-1416

Malware in sbrugna...

EUVD-2005-1576

Malware in sbrugna...

ISP Site Man 0 Admin_Login.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17347/info Site Man is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow ...

Damailinglist List System V2.1 Authorization Bypass Vulnerability

Exploit for asp platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

CVE-2008-5888

Multiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 hitcounter.asp, 2 userdelete.asp, and 3 userupdate.asp; 4 the userid parameter to adminlogin.asp aka the USERNAME field in admin.asp; and 5 the PassWord paramete...

CVE-2008-5888: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Click&Rank allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 hitcounter.asp, 2 userdelete.asp, and 3 userupdate.asp; 4 the userid parameter to adminlogin.asp aka the USERNAME field in admin.asp; and 5 the PassWord paramete...

CVE-2007-5704: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in CodeWidgets.com Online Event Registration Template allow remote attackers to execute arbitrary SQL commands via the 1 Email Address and 2 Password fields in a login.asp and b adminlogin.asp...

CVE-2006-6709: Undefined Security Weakness

Multiple SQL injection vulnerabilities in MGinternet Property Site Manager allow remote attackers to execute arbitrary SQL commands via the 1 p parameter to a detail.asp; the 2 l, 3 typ, or 4 loc parameter to b listings.asp; or the 5 Password or 6 Username parameter to c adminlogin.asp. NOTE: som...

CVE-2006-6066: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Dragon Calendar / Events Listing 2.x allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to a adminlogin.asp, the 3 ID parameter to b eventsearchdetail.asp, or the 4 VenueID parameter to c venuedetail.asp...

CVE-2006-5976

CVE-2006-5976 describes multiple SQL injection vulnerabilities in BlogMe 3.0 affecting the admin_login.asp page. The vulnerability allows remote attackers to insert or modify SQL statements through the (1) Username or (2) Password fields, enabling arbitrary SQL execution. This is a remote, unauth...

CVE-2006-5976

Multiple SQL injection vulnerabilities in adminlogin.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password field. NOTE: some of these details are obtained from third party information...

CVE-2006-5976: Undefined Security Weakness

Multiple SQL injection vulnerabilities in adminlogin.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password field. NOTE: some of these details are obtained from third party information...

MGinternet Property Site Manager - 'admin_login.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/21073/info MGinternet Property Site Manager is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because it fails to sufficiently sanitize user-supplied input. An attacker could exploit these issu...

CVE-2006-1586

CVE-2006-1586 concerns a SQL injection in the admin_login.asp script of ISP of Egypt SiteMan, exploitable via the pass parameter to allow remote execution of arbitrary SQL commands. The vulnerability affects the login-related functionality and arises from improper handling of input in the pass pa...

CVE-2006-1586

SQL injection vulnerability in adminlogin.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL commands via the pass parameter...

SiteMan <= All version SQL injection in admin_login.asp

Vendor : SiteMan Target Page : adminlogin.asp Bug Finder : S3rv3rhack3r administrator panel demo: http://www.ispdemos.com/Demo/SiteMan/adminlogin.asp WWW : http://www.ispofegypt.com/ you can login to adminlogin.asp with user : admin pass : ' or '...

CVE-2006-1586: Undefined Security Weakness

SQL injection vulnerability in adminlogin.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL commands via the pass parameter...

CVE-2005-1573

SQL injection vulnerability in adminlogin.asp for ASP Virtual News Manager allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2005-1573

Vulnerability summary (CVE-2005-1573) : The issue affects the ASP Virtual News Manager, specifically the admin_login.asp endpoint. It is a SQL injection vulnerability that allows remote attackers to craft input via the password parameter to execute arbitrary SQL commands on the backend database. ...