6 matches found
CVE-2008-6204: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in SuperNET Shop 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to secure/admin/guncelle.asp, 2 kulad and sifre parameters to secure/admin/giris.asp, and 3 username and password to secure/admin/default.asp...
CVE-2006-6337
Multiple SQL injection vulnerabilities in giris.asp in Aspee and Dogantepe Ziyaretci Defteri allow remote attackers to execute arbitrary SQL commands via the 1 kullanici or 2 parola parameter...
CVE-2006-6337
The CVE-2006-6337 entry covers SQL injection in giris.asp of the Aspee and Dogantepe Ziyaretci Defteri guestbook project. The vulnerability allows remote attackers to inject arbitrary SQL via the (1) kullanici or (2) parola parameters, enabling potentially partial data exposure or modification ac...
CVE-2006-6337
Multiple SQL injection vulnerabilities in giris.asp in Aspee and Dogantepe Ziyaretci Defteri allow remote attackers to execute arbitrary SQL commands via the 1 kullanici or 2 parola parameter...
CVE-2006-6337: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in giris.asp in Aspee and Dogantepe Ziyaretci Defteri allow remote attackers to execute arbitrary SQL commands via the 1 kullanici or 2 parola parameter...
CVE-2006-6270: Undefined Security Weakness
Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via 1 the soruid parameter in forum2.asp, 2 the ak parameter in kullanicilistesi.asp, 3 the kelimeler parameter in aramayap.asp, and 4 the kullaniciadi parameter in giris.asp; and allow...