278 matches found
WWWeb Concepts Events System 1.0 - login.asp SQL Injection
WWWeb Concepts Events System 1.0 - login.asp SQL Injection source: https://www.securityfocus.com/bid/13859/info WWWeb Concepts Events System is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp'...
CVE-2005-1834
The CVE-2005-1834 entry describes a SQL injection vulnerability in NEXTWEB (i)Site, specifically in login.asp. The underlying issue is unsanitized input in the password field, enabling remote attackers to execute arbitrary SQL commands and bypass authentication. The available connected documents ...
CVE-2005-1834: Undefined Security Weakness
SQL injection vulnerability in login.asp in NEXTWEB iSite allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field...
CVE-2005-1805
CVE-2005-1805 describes an SQL injection in the login.asp of OS4E (Online Solutions for Educators). The vulnerability involves the password parameter being unsafely handled, allowing remote attackers to manipulate SQL commands and potentially access or modify data. The affected product is cited a...
Livingcolor Livingmailing 1.3 - login.asp SQL Injection
Livingcolor Livingmailing 1.3 - login.asp SQL Injection source: https://www.securityfocus.com/bid/13836/info livingmailing is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script. livingmailin...
CVE-2005-1805: Undefined Security Weakness
SQL injection vulnerability in login.asp in an unknown product by Online Solutions for Educators OS4E allows remote attackers to execute arbitrary SQL commands via the password...
CVE-2005-1780: Undefined Security Weakness
SQL injection vulnerability in admin/login.asp in Active News Manager allows remote attackers to execute arbitrary SQL commands via the password...
CVE-2005-1785: Undefined Security Weakness
SQL injection vulnerability in ad/login.asp in ZonGG 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter...
PT-2005-2772 · Os4E · Unknown Product
Name of the Vulnerable Software and Affected Versions: Unknown product by Online Solutions for Educators OS4E affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the password variable in the login.asp file. This could potentially le...
OS4E - login.asp SQL Injection
OS4E - login.asp SQL Injection source: https://www.securityfocus.com/bid/13804/info os4e is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL query. Successful...
OS4E - 'login.asp' SQL Injection
source: https://www.securityfocus.com/bid/13804/info os4e is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'login.asp' script before using it in an SQL query. Successful exploitation could result in a...
CVE-2005-1750
The CVE-2005-1750 issue affects ezdwc NewsletterEz 3.0 and is a SQL injection in login.asp via the password parameter. The root cause is improper handling of the password input in login.asp, enabling arbitrary SQL execution. Practical impact is remote arbitrary SQL execution against the applicati...
Active News Manager - login.asp SQL Injection
Active News Manager - login.asp SQL Injection source: https://www.securityfocus.com/bid/13759/info Active News Manager is prone to an SQL injection vulnerability. This issue affects the 'login.asp' script. Successful exploitation could result in a compromise of the application, disclosure or...
Active News Manager - 'login.asp' SQL Injection
source: https://www.securityfocus.com/bid/13759/info Active News Manager is prone to an SQL injection vulnerability. This issue affects the 'login.asp' script. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to...
CVE-2005-1750: Undefined Security Weakness
SQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to execute arbitrary SQL commands via the password parameter...
CVE-2005-1602: Undefined Security Weakness
SQL injection vulnerability in login.asp for Net56 Browser Based File Manager 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field...
CVE-2003-1157: Undefined Security Weakness
Cross-site scripting XSS vulnerability in login.asp in Citrix MetaFrame XP Server 1.0 allows remote attackers to inject arbitrary web script or HTML via the NFuseMessage parameter...
CVE-2005-1429
SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter...
CVE-2005-1429
CVE-2005-1429 describes a SQL injection vulnerability in login.asp of WWWguestbook 1.1. The vulnerability arises from unsafely handling the password parameter, allowing remote attackers to execute arbitrary SQL commands. Affects the WWWguestbook 1.1 web application (login.asp) and could enable un...
CVE-2005-1429: Undefined Security Weakness
SQL injection vulnerability in login.asp in WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter...