CVE-2006-1000: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 newsid parameter to newsdetailsview.asp and 2 password parameter to login.asp...

CVE-2006-0911

CVE-2006-0911 affects Ipswitch WhatsUp Professional 2006. The vulnerable component is NmService.exe handling requests to Login.asp. The underlying issue is triggered by crafted requests that use the parameters (1) "In]" and (2) "b;tnLogIn", or (3) malformed btnLogIn, potentially involving missing...

CVE-2006-0911

NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service CPU consumption via crafted requests to Login.asp, possibly involving the 1 "In" and 2 "b;tnLogIn" parameters, or 3 malformed btnLogIn parameters, possibly involving missing "" open bracket or...

CVE-2006-0911: Undefined Security Weakness

NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service CPU consumption via crafted requests to Login.asp, possibly involving the 1 "In" and 2 "b;tnLogIn" parameters, or 3 malformed btnLogIn parameters, possibly involving missing "" open bracket or...

CVE-2006-0490

The CVE-2006-0490 entry describes an SQL injection vulnerability in login.asp of ASPThai.Net ASPThai Forums 8.0 and earlier , enabling remote attackers to execute arbitrary SQL commands and bypass login authentication via the password field. No exploit details or remediation are provided in the c...

CVE-2006-0490: Undefined Security Weakness

SQL injection vulnerability in login.asp in ASPThai.Net ASPThai Forums 8.0 and earlier allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the password field...

CVE-2006-0192: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in LoginValidate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL commands via the Password parameter to login.asp...

CVE-2005-4483

Cross-site scripting XSS vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the retpage parameter...

CVE-2005-4482

The CVE-2005-4482 entry describes a Cross-site Scripting (XSS) vulnerability in PortalApp 3.3 and earlier, exploitable via the ret_page parameter in login.asp. Affected component: login.asp within PortalApp; root cause: improper handling of the ret_page input enables injection of arbitrary script...

CVE-2005-4484: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in IntranetApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 retpage parameter to login.asp or the 2 dosearch and 3 search parameters to content.asp...

CVE-2005-4482: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the retpage parameter...

CVE-2005-4483: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the retpage parameter...

SiteEnable XSS vuln.

SiteEnable XSS vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/siteenable-xss-vuln.html vendor:http://www.siteenable.com/ affected version:3.3 and prior Product Description: SiteEnable is an open source Web application that combines content...

CVE-2005-3480

CVE-2005-3480 affects Ringtail CaseBook 6.1.0 where login.asp returns distinct error messages for valid vs. invalid usernames, enabling remote attackers to enumerate valid usernames. The connected documents corroborate that the issue is an informational disclosure in authentication messages, with...

CVE-2005-3479

CVE-2005-3479 describes a cross-site scripting (XSS) flaw in Ringtail CaseBook 6.1.0, specifically in login.asp where an attacker can inject arbitrary script via the users parameter. Affected software is Ringtail CaseBook 6.1.0; the vulnerability arises from improper handling of the users input, ...

CVE-2005-3479: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.asp in Ringtail CaseBook 6.1.0 allows remote attackers to inject arbitrary web script or HTML via the users parameter...

CVE-2005-3480: Undefined Security Weakness

login.asp in Ringtail CaseBook 6.1.0 displays different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames...

CVE-2005-3384

SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

CVE-2005-3385

The CVE-2005-3385 entry describes a SQL injection vulnerability in Techno Dreams Mailing List script that allows remote attackers to execute arbitrary SQL and bypass authentication via the userid parameter in admin/login.asp. Affected component: the Mailing List script; vulnerability type: SQL in...

CVE-2005-3384: Undefined Security Weakness

SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...