EUVD-2006-1242

Malware in sbrugna...

DSLogin 1.0 Index.PHP Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/17262/info DSLogin is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

[eVuln] DSLogin Authentication Bypass Vulnerability

New eVuln Advisory: DSLogin Authentication Bypass Vulnerability http://evuln.com/vulns/100/summary.html --------------------Summary---------------- eVuln ID: EV0100 CVE: CVE-2006-1238 Software: DSLogin Sowtware's Web Site: http://dsportal.uw.hu/ Versions: 1.0 Critical Level: Moderate Type: SQL...

DSLogin 1.0 - 'index.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/17262/info DSLogin is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromis...

CVE-2006-1238

SQL injection vulnerability in DSLogin 1.0, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $loguserid variable in 1 index.php and 2 admin/index.php...

Sql injection

SQL injection vulnerability in DSLogin 1.0, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $loguserid variable in 1 index.php and 2 admin/index.php...

CVE-2006-1238

SQL injection vulnerability in DSLogin 1.0, with magicquotesgpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $loguserid variable in 1 index.php and 2 admin/index.php...

CVE-2006-1238

CVE-2006-1238 describes an SQL injection vulnerability in DSLogin 1.0 where magic_quotes_gpc is disabled. The affected scripts are (1) index.php and (2) admin/index.php. exploitation via the vulnerable variable is possible to execute arbitrary SQL and bypass authentication through the $log_userid...