86 matches found
CVE-2006-0608
Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter to check.php or 2 unknown attack vectors to scripts that display information from the database...
CVE-2006-0607
check.php in Hinton Design phphd 1.0 does not check passwords when certain cookies are provided, which allows remote attackers to bypass authentication...
CVE-2006-0604: Undefined Security Weakness
check.php in Hinton Design phphg Guestbook 1.2 does not check the user password when authenticating via cookies, which allows remote attackers to gain unauthorized access...
CVE-2006-0607: Undefined Security Weakness
check.php in Hinton Design phphd 1.0 does not check passwords when certain cookies are provided, which allows remote attackers to bypass authentication...
CVE-2006-0608: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the username parameter to check.php or 2 unknown attack vectors to scripts that display information from the database...
CVE-2006-0570: Undefined Security Weakness
Multiple SQL injection vulnerabilities in phpstatus 1.0, when gpcmagicquotes is disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via 1 the username parameter in check.php and 2 unknown attack vectors in the administrative interface...