LDF - login.asp SQL Injection

LDF - login.asp SQL Injection source: https://www.securityfocus.com/bid/33431/info LDF is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Lootan - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/33439/info Lootan is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, ...

Lootan - login.asp SQL Injection

Lootan - login.asp SQL Injection source: https://www.securityfocus.com/bid/33439/info Lootan is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Sql injection

Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the 1 login parameter aka user field or the 2 password parameter aka pass field. NOTE: some of these details are obtained from third party information...

CVE-2008-5926

Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the 1 login parameter aka user field or the 2 password parameter aka pass field. NOTE: some of these details are obtained from third party information...

CVE-2008-5926

Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the 1 login parameter aka user field or the 2 password parameter aka pass field. NOTE: some of these details are obtained from third party information...

CVE-2008-5926

CVE-2008-5926 affects the ASP-DEv Internal E-Mail System, where multiple SQL injection flaws exist in login.asp that allow remote attackers to alter the database by manipulating the login (user) or password fields. The NVD entry reports a base score of 7.5 (HIGH) with network access and LOW attac...

CVE-2008-5926: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the 1 login parameter aka user field or the 2 password parameter aka pass field. NOTE: some of these details are obtained from third party information...

CVE-2008-5882: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.asp in Citrix Application Gateway - Broadcast Server BCS before 6.1, as used by Avaya AG250 - Broadcast Server before 2.0 and possibly other products, allows remote attackers to execute arbitrary SQL commands via the txtUID parameter...

Citrix Broadcast Server SQL injection

login.asp SQL injection...

CVE-2008-5692: Improper Authentication

Ipswitch WSFTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name...

CVE-2008-5591

CVE-2008-5591 describes a Cross-site scripting (XSS) vulnerability in login.asp of Nightfall Personal Diary 1.0, allowing remote attackers to inject arbitrary web script or HTML via the username parameter (and possibly other login fields). The affected component is the login page (login.asp) and ...

CVE-2008-5591: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter and possibly other "login fields." NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the email parameter...

CVE-2008-5571

CVE-2008-5571 describes an SQL injection vulnerability in the web app Professional Download Assistant 0.1 , specifically in admin/login.asp . An attacker can pass crafted values in the two fields, uname (user) or psw (passwd), to cause arbitrary SQL execution on the backend database. This can lea...

CVE-2008-5582: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the email parameter...

CVE-2008-5571: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...

CVE-2008-5222

CVE-2008-5222 is a SQL injection vulnerability in login.asp of Dvbbs 8.2.0, exploitable via the username parameter to execute arbitrary SQL remotely. The NVD entry shows a CVSSv2 base score of 7.5 (HIGH), with network access, no authentication, and partial impacts on confidentiality, integrity, a...

CVE-2008-5222: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...