Sql injection

Multiple SQL injection vulnerabilities in IP Reg 0.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 locationid parameter to locationdel.php and 2 vlanid parameter to vlanedit.php. NOTE: the vlanview.php and vlandel.php vectors are already covered by CVE-2007-6579...

CVE-2007-6579

Multiple SQL injection vulnerabilities in Ip Reg 0.3 allow remote attackers to execute arbitrary SQL commands via the vlanid parameter to 1 vlanview.php, 2 vlanedit.php, and 3 vlandel.php; the 4 assetclassgroupid parameter to assetclassgroupview.php; the 5 subnetid parameter to nodelist.php; and...

CVE-2007-6579

CVE-2007-6579 covers multiple SQL injection vulnerabilities in Ip Reg 0.3 (and later 0.4) that let remote attackers run arbitrary SQL commands via parameters such as vlan_id (to vlanview.php, vlanedit.php, vlandel.php), assetclassgroup_id (to assetclassgroupview.php), and subnet_id (to nodelist.p...