CVE-2006-6862: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 login/login.asp or 2 login/register.asp...

CVE-2006-6846

Multiple SQL injection vulnerabilities in While You Were Out WYWO InOut Board 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the num parameter in a phonemessage.asp, 2 the catcode parameter in b faqDsp.asp, and the 3 Username and 4 Password fields in c login.asp...

CVE-2006-6846: Undefined Security Weakness

Multiple SQL injection vulnerabilities in While You Were Out WYWO InOut Board 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the num parameter in a phonemessage.asp, 2 the catcode parameter in b faqDsp.asp, and the 3 Username and 4 Password fields in c login.asp...

CVE-2006-6846

Multiple SQL injection vulnerabilities in While You Were Out WYWO InOut Board 1.0 allow remote attackers to execute arbitrary SQL commands via 1 the num parameter in a phonemessage.asp, 2 the catcode parameter in b faqDsp.asp, and the 3 Username and 4 Password fields in c login.asp...

CVE-2006-6543

Multiple SQL injection vulnerabilities in login.asp in AppIntellect SpotLight CRM 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 login UserName and possibly 2 password parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-6543

Multiple SQL injection vulnerabilities in login.asp in AppIntellect SpotLight CRM 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 login UserName and possibly 2 password parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-6543

CVE-2006-6543 affects AppIntellect SpotLight CRM 1.0, specifically the login.asp component. The vulnerability is described as multiple SQL injection flaws that allow an attacker to execute arbitrary SQL commands through the (1) login (UserName) parameter and potentially (2) the password parameter...

CVE-2006-6543: Undefined Security Weakness

Multiple SQL injection vulnerabilities in login.asp in AppIntellect SpotLight CRM 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 login UserName and possibly 2 password parameter. NOTE: some of these details are obtained from third party information...

SpotLight CRM 1.0 - login.asp SQL Injection

SpotLight CRM 1.0 - login.asp SQL Injection Title : SpotLight CRM 1.0 login.asp | Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : $2,499 SQL http://target/path//login.asp=POST SQL Example: - All User UserName And Password Changed "kro" // login.asp UserName: ';update login set...

SpotLight CRM 1.0 (login.asp) Remote SQL Injection Vulnerability

No description provided by source. Title : SpotLight CRM 1.0 login.asp | Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : $2,499 SQL http://target/path//login.asp=POST SQL Example: - All User UserName And Password Changed "kro" // login.asp UserName: ';update login set...

SpotLight CRM 1.0 - 'login.asp' SQL Injection

Title : SpotLight CRM 1.0 login.asp | Remote SQL Injection Vulnerability Author : ajann Contact : : $$$ : $2,499 SQL http://target/path//login.asp=POST SQL Example: - All User UserName And Password Changed "kro" // login.asp UserName: ';update login set password='kro'-- // login.asp UserName:...

SpotLight CRM 1.0 (login.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ SpotLight CRM 1.0 login.asp Remote SQL Injection Vulnerability ================================================================ Title : SpotLight CRM 1.0 login.asp | Remote S...

CVE-2006-6399

CVE-2006-6399 concerns Superfreaker Studios UPublisher 1.0, where a SQL injection flaw in the login.asp Username parameter allows remote execution of arbitrary SQL commands. The vulnerability is described across multiple sources (NVD, Red Hat, CVE List) with the same core detail, but no concrete ...

CVE-2006-6399: Undefined Security Weakness

SQL injection vulnerability in Superfreaker Studios UPublisher 1.0 allows remote attackers to execute arbitrary SQL commands via the Username parameter in login.asp. NOTE: the provenance of this information is unknown; details are obtained from third party sources...

CVE-2006-6260

SQL injection vulnerability in login.asp in Redbinaria Sistema Integrado de Administracion de Portales SIAP allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-6260

SQL injection vulnerability in login.asp of Redbinaria Sistema Integrado de Administracion de Portales (SIAP) allows remote attackers to execute arbitrary SQL commands via the username parameter. The issue is described in CVE-2006-6260 and covered by multiple sources (NVD, CVE list). Documented i...

CVE-2006-6260: Undefined Security Weakness

SQL injection vulnerability in login.asp in Redbinaria Sistema Integrado de Administracion de Portales SIAP allows remote attackers to execute arbitrary SQL commands via the username parameter...

Siap Cms Sql Injection (login.asp)

login.asp username Sql Injection Attack ' or 'x'='x dork: com.ve/login.asp vendor: www.redbinaria.com greetz: Dario Struz And G74 Security Group...

SIAP CMS - login.asp SQL Injection

SIAP CMS - login.asp SQL Injection source: https://www.securityfocus.com/bid/21286/info SIAP CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

CVE-2006-5958: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script or HTML via the 1 username and 2 password fields in a login.asp, 3 search field in b search.asp, and 4 email field in c sendpassword.asp...