EUVD-2006-3661

Malware in sbrugna...

CVE-2006-3515

SQL injection vulnerability in the loginADP function in ajaxp.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 username or 2 password parameters...

CVE-2006-3515

SQL injection vulnerability in the loginADP function in ajaxp.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 username or 2 password parameters...

CVE-2006-3515

The vulnerability is an SQL injection in AjaxPortal 3.0 affecting the loginADP function in ajaxp.php. Remote attackers can inject via the (username) or (password) parameters to execute arbitrary SQL and bypass authentication. Documents do not provide patch/version details or explicit mitigations....