CVE-2014-3872: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the administration login page in D-Link DAP-1350 Rev. A1 with firmware 1.14 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password...

Barracuda Spam Firewall crossite scripting

Crossite scripting with Web Syslog, with web administration login page...