CVE-2010-1366

Multiple SQL injection vulnerabilities in admin/adminlogin.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 adminname and 2 adminpassword parameters...

CVE-2010-1366

CVE-2010-1366 describes multiple SQL injection vulnerabilities in the admin_login.php of Uiga Fan Club 1.0 and earlier. The issue allows remote attackers to execute arbitrary SQL commands through the (1) admin_name and (2) admin_password parameters, with the affected component being the login han...

CVE-2010-1367

CVE-2010-1367 describes multiple cross-site scripting (XSS) vulnerabilities in the admin/admin_login.php component of Uiga Fan Club, allowing remote attackers to inject arbitrary web script or HTML via the admin_name or admin_password parameters. The issue affects the login handling logic, enabli...

CVE-2010-1366: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin/adminlogin.php in Uiga Fan Club 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 adminname and 2 adminpassword parameters...

CVE-2010-1367: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in admin/adminlogin.php in Uiga Fan Club, as downloaded on 20100310, allow remote attackers to inject arbitrary web script or HTML via the 1 adminname and 2 adminpassword parameters. NOTE: the provenance of this information is unknown; the details...

Cross site scripting

Cross-site scripting XSS vulnerability in adminlogin.php in MCshoutbox 1.1 allows remote attackers to inject arbitrary web script or HTML via the loginerror parameter...

CVE-2009-3714

CVE-2009-3714 affects MCshoutbox 1.1; the XSS flaw is in admin_login.php and is exploitable by providing a crafted loginerror parameter to inject arbitrary scripts/HTML into the victim’s browser. The public documents describe the vulnerability type and affected component but do not specify a patc...

CVE-2009-3714

Cross-site scripting XSS vulnerability in adminlogin.php in MCshoutbox 1.1 allows remote attackers to inject arbitrary web script or HTML via the loginerror parameter...

CVE-2009-3714: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in adminlogin.php in MCshoutbox 1.1 allows remote attackers to inject arbitrary web script or HTML via the loginerror parameter...

MCshoutbox 1.1 (SQL/XSS/Shell) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote Vulnerabilities ============================================================== + MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote...

MCshoutbox 1.1 (SQL/XSS/Shell) Multiple Remote Vulnerabilities

No description provided by source. + MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org Homepage : http://www.maniacomputer.com/dload/MCshoutboxDownloadPage.html + SQL Injection Login Bypass - Note : magicquotesgpc =...

mcshoutbox 1.1 - SQL Injection / Cross-Site Scripting / shell

MCshoutbox 1.1 SQL/XSS/Shell Multiple Remote Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org Homepage : http://www.maniacomputer.com/dload/MCshoutboxDownloadPage.html + SQL Injection Login Bypass - Note : magicquotesgpc = off - Vulnerable code in...

Sql injection

Multiple SQL injection vulnerabilities in admin/adminlogin.php in Online Grades 3.2.4 allow remote attackers to execute arbitrary SQL commands via the 1 uname or 2 pword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0479

The CVE-2009-0479 entry concerns Online Grades 3.2.4, specifically the admin/admin_login.php component, where the (1) uname and (2) pword parameters are susceptible to SQL injection. Remote attackers could execute arbitrary SQL commands via these inputs, indicating a classic backend query manipul...

CVE-2009-0479: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin/adminlogin.php in Online Grades 3.2.4 allow remote attackers to execute arbitrary SQL commands via the 1 uname or 2 pword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-1436: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in osTicket allow remote attackers to inject arbitrary web script or HTML via 1 the t parameter to view.php, 2 the ostickettitle parameter to header.php, 3 the em parameter to adminlogin.php, 4 the e parameter to userlogin.php, 5 the err parameter...