Sql injection

SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute arbitrary SQL commands via the passw parameter. NOTE: Some of these details are obtained from third party information...

CVE-2012-0913

CVE-2012-0913 affects ICloudCenter ICTimeAttendance 1.0, specifically the checklogin.aspx path. The vulnerability is a SQL injection via the passw parameter that allows remote execution of arbitrary SQL commands. This conclusion is based on multiple sources (NVD, CVE listings) describing the same...

PT-2012-2945

Name of the Vulnerable Software and Affected Versions ICloudCenter ICTimeAttendance version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the passw parameter in the "checklogin.aspx" endpoint. Recommendations For ICloudCenter...

CVE-2012-0913: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in checklogin.aspx in ICloudCenter ICTimeAttendance 1.0 allows remote attackers to execute arbitrary SQL commands via the passw parameter. NOTE: Some of these details are obtained from third party information...