CVE-2006-4857

SQL injection vulnerability in default.asp aka the login page in ClickTech ClickBlog 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 formcodeword aka the Password field parameters...

CVE-2006-4857

CVE-2006-4857 is an SQL injection vulnerability in the default.asp login page of ClickTech ClickBlog 2.0. The issue permits remote attackers to execute arbitrary SQL commands via the username and form_codeword parameters. The vulnerability is categorized with a high base score (CVSS v2: 7.5; Netw...

CVE-2006-4857: Undefined Security Weakness

SQL injection vulnerability in default.asp aka the login page in ClickTech ClickBlog 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 formcodeword aka the Password field parameters...

CVE-2006-3029

Cross-site scripting XSS vulnerability in default.asp in ClickTech Clickcart 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-3029

Cross-site scripting XSS vulnerability in default.asp in ClickTech Clickcart 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2006-3029

This CVE (CVE-2006-3029) concerns a Cross-site scripting (XSS) vulnerability in ClickTech Clickcart 6.0 and earlier, exploitable via the cat parameter in default.asp. The affected app/function is default.asp of Clickcart; the underlying issue is input handling that allows injection of arbitrary s...

CVE-2006-3029: Undefined Security Weakness

Cross-site scripting XSS vulnerability in default.asp in ClickTech Clickcart 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter...