CVE-2005-3383: Undefined Security Weakness

SQL injection vulnerability in Techno Dreams Announcement script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

CVE-2005-3385: Undefined Security Weakness

SQL injection vulnerability in Techno Dreams Mailing List script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

CVE-2005-3386: Undefined Security Weakness

SQL injection vulnerability in Techno Dreams Web Directory script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp...

CVE-2005-2440

SQL injection vulnerability in login.asp in Thomson Web Skill Vantage Manager allows remote attackers to execute arbitrary SQL commands via the svmPassword parameter...

CVE-2005-2440

CVE-2005-2440 affects Thomson Web Skill Vantage Manager: a SQL injection vulnerability exists in login.asp via the svmPassword parameter. Root cause is improper handling/sanitization of user input in the login flow, enabling remote attackers to craft SQL statements executed by the backend. The vu...

CVE-2005-2440: Undefined Security Weakness

SQL injection vulnerability in login.asp in Thomson Web Skill Vantage Manager allows remote attackers to execute arbitrary SQL commands via the svmPassword parameter...

CVE-2005-2207: Undefined Security Weakness

Cross-site scripting XSS vulnerability in store/login.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2004-2210: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Express-Web Content Management System CMS allow remote attackers to steal cookie-based authentication information and possibly perform other exploits via the 1 n, 2 b, 3 e, or 4 a parameters to default.asp, 5 the Referer header in an HTTP reque...

Ipswitch WhatsUp Professional Login.asp Multiple Field SQL Injection

The remote host is running Ipswitch WhatsUp Professional, a network management and monitoring package. The web front-end for WhatsUp Professional on the remote host is prone to a SQL injection attack because it fails to sanitize the 'sUserName' and 'sPassword' parameters in the 'Login.asp' script...

CVE-2005-1250

The CVE-2005-1250 entry describes a SQL injection in Ipswitch WhatsUp Professional 2005 SP1, targeting the web front end (NmConsole/Login.asp). The vulnerability allows remote attackers to submit crafted input in the User Name (sUserName) or Password (sPassword) fields, potentially yielding arbit...

CVE-2005-1250: Undefined Security Weakness

SQL injection vulnerability in the logon screen of the web front end NmConsole/Login.asp for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the 1 User Name field sUserName parameter or 2 Password sPassword parameter...

Ipswitch WhatsUp Professional 2005 SP1 - 'login.asp' SQL Injection

source: https://www.securityfocus.com/bid/14039/info WhatsUp Professional is prone to an SQL injection vulnerability affecting its Web-based front end. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL...

Ipswitch WhatsUp Professional 2005 SP1 - login.asp SQL Injection

Ipswitch WhatsUp Professional 2005 SP1 - login.asp SQL Injection source: https://www.securityfocus.com/bid/14039/info WhatsUp Professional is prone to an SQL injection vulnerability affecting its Web-based front end. This issue is due to a failure in the application to properly sanitize...

CVE-2005-2035

CVE-2005-2035 concerns SQL injection in the login.asp of Cool Cafe (Cool Café) Chat 1.2.1. The vulnerability lets remote attackers run arbitrary SQL commands through the password field, enabling potential authentication bypass or data access. Affected product: Cool Cafe Chat 1.2.1; vulnerable com...

CVE-2005-2035: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.asp for Cool Cafe Cool Café Chat 1.2.1 allows remote attackers to execute arbitrary SQL commands via the password...

Cool Cafe Chat 1.2.1 - login.asp SQL Injection

Cool Cafe Chat 1.2.1 - login.asp SQL Injection source: https://www.securityfocus.com/bid/13976/info Cool Cafe Chat is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an...

CVE-2005-1906

SQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute arbitrary SQL commands via the password. NOTE: there is little public information about this product and its vendor, and the original researcher announcement is no longer available...

CVE-2005-1910: Undefined Security Weakness

SQL injection vulnerability in login.asp for WWWeb Concepts Events System 1.0 allows remote attackers to execute arbitrary SQL commands via the password...

CVE-2005-1904: Undefined Security Weakness

SQL injection vulnerability in login.asp in JiRo's Upload System JUS 1 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2005-1906: Undefined Security Weakness

SQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute arbitrary SQL commands via the password. NOTE: there is little public information about this product and its vendor, and the original researcher announcement is no longer available...