2502 matches found
CVE-2005-2478
SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel...
CVE-2002-2093: Undefined Security Weakness
The Video Control Panel on SGI O2/IRIX 6.5, when the Default Input is set to "Output Video", allows attackers to access a console session by running videoout then videoin...
CVE-2005-2478: Undefined Security Weakness
SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel...
Ragnarok Online Control Panel 4.3.4 a - Authentication Bypass
source: https://www.securityfocus.com/bid/14429/info Ragnarok Online Control Panel ROCP is prone to a vulnerability that may let remote attackers bypass user authentication. This issue is related to how PHP variables are handled, letting an attacker influence a variable that is used to check user...
Ragnarok Online Control Panel 4.3.4 a - Authentication Bypass
Ragnarok Online Control Panel 4.3.4 a - Authentication Bypass source: https://www.securityfocus.com/bid/14429/info Ragnarok Online Control Panel ROCP is prone to a vulnerability that may let remote attackers bypass user authentication. This issue is related to how PHP variables are handled, letti...
aspjarSQL.txt
hello , my name is: arash setayeshi & my yahoo id is : arashpc0 I found a new vulnerability in aspjar guestbook that we can control website & go to admin control panel by sql injection. sql injection : in login pageguestbook/admin/login.asp , username should be blank & password is : ' or 'x'='x...
a new sql injection for aspjar guestbook
hello , my name is: arash setayeshi & my yahoo id is : arashpc0 I found a new vulnerability in aspjar guestbook that we can control website & go to admin control panel by sql injection. sql injection : in login pageguestbook/admin/login.asp , username should be blank & password is : ' or 'x'='x...
compozitSQL.txt
Date: 18:15 05/05/05 Subject: "Compozit Webhosting Panel Administration Vulnerability" Vulnerable version: Compozit 1.0 Description: Compozit is a France Webhosting that use Administration Panel to setup their website online.Have an Control Panel to upload,make a new directory,and modify web page...
CVE-2005-1909
The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a "!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting XSS vulnerability...
CVE-2005-1909
The CVE-2005-1909 entry concerns the 602LAN SUITE 2004 web server control panel where remote attackers can disrupt administrator log readability by sending a GET request containing a
CVE-2005-1909
The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a "!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting XSS vulnerability...
JiRos Upload System 1.0 - login.asp SQL Injection
JiRos Upload System 1.0 - login.asp SQL Injection source: https://www.securityfocus.com/bid/13833/info JiRo's Upload System is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...
JiRo's Upload System 1.0 - 'login.asp' SQL Injection
source: https://www.securityfocus.com/bid/13833/info JiRo's Upload System is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of...
NEXTWEB (i)Site - login.asp SQL Injection
NEXTWEB iSite - login.asp SQL Injection source: https://www.securityfocus.com/bid/13834/info NEXTWEB iSite is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitatio...
CVE-2004-2017: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Turbo Traffic Trader C TTT-C 1.0 allow remote attackers to inject arbitrary HTML or web script, as demonstrated via 1 the link parameter to ttt-out, 2 the X-Forwarded-For header in a GET request to ttt-in, 3 the Referer header in a GET request ...
CVE-2005-1005
ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php with hex-encoded .. sequences in the ftoedit parameter...
CVE-2005-1085
Cross-site scripting XSS vulnerability in the control panel in aeDating 3.2 allows remote attackers to inject arbitrary web script or HTML...
CVE-2005-0784
Multiple cross-site scripting XSS vulnerabilities in Phorum before 5.0.15 allow remote attackers to inject arbitrary web script or HTML via 1 the subject line to follow.php or 2 the subject line in the user's personal control panel...
CVE-2005-1085
CVE-2005-1085 : The vulnerability is a cross-site scripting (XSS) issue in the aeDating 3.2 control panel that allows remote attackers to inject arbitrary web script or HTML. Connected sources (NVD, Red Hat, CVE listings) reiterate the same description without providing technical details such as ...