CVE-2008-6796

CVE-2008-6796 is a SQL injection vulnerability affecting Pre Projects Pre Real Estate Listings, specifically in the login script (manager/login.php). The vulnerability allows remote attackers to inject arbitrary SQL via the username1 parameter (also referred to as Admin/Username field), enabling ...

Sql injection

Multiple SQL injection vulnerabilities in login.php in Tiger Document Management System DMS allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-1503

CVE-2009-1503 documents multiple SQL injection vulnerabilities in the Tiger DMS (Tiger Document Management System) login.php. The vulnerability allows remote attackers to supply crafted input for the (1) username or (2) password parameters, potentially causing arbitrary SQL execution. The OpenVAS...

Tiger DMS (Auth Bypass) Login.php Remote SQL Injection Vulnerability

No description provided by source. ============================================================================== DDDDD OOOO SSSS DDDD ZZZZZZ TTTTTTTTT EEEEE A MM MM D D o O S D D Z T E A A M M M M D D o o SSSS D D Z T EEEEE AAAAA M M M D D o o S D D Z T E A A M M DDDD oooO SSSS DDDD ZZZZZZ T EEE...

Sql injection

SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the loginuser aka username parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1487

SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the loginuser aka username parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1487

CVE-2009-1487 describes an SQL injection vulnerability in FunGamez RC1, specifically in pages/login.php where the login_user parameter (username) allows remote attackers to execute arbitrary SQL commands. Root cause: insufficient input validation on the login_user field. Impact stated: arbitrary ...

Tiger DMS SQL Injection

============================================================================== DDDDD OOOO SSSS DDDD ZZZZZZ TTTTTTTTT EEEEE A MM MM D D o O S D D Z T E A A M M M M D D o o SSSS D D Z T EEEEE AAAAA M M M D D o o S D D Z T E A A M M DDDD oooO SSSS DDDD ZZZZZZ T EEEEE A A M M...

CVE-2008-6764

CVE-2008-6764 describes a reflected XSS in Silentum LoginSys 1.0.0, exploitable via the message parameter in login.php. The vulnerability allows remote attackers to inject arbitrary script/HTML, potentially affecting users who view the crafted parameter. Documents consistently identify the compon...

Sql injection

Multiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design IBD Micro CMS 3.5 aka 0.3.5 allow remote attackers to execute arbitrary SQL commands via 1 the administratorsusername parameter aka the Username field or 2 the administratorspass parameter aka the Password fie...

CVE-2009-1247

SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

gravy media CMS 1.07 - Multiple Vulnerabilities

gravy media CMS 1.07 - Multiple Vulnerabilities 0x01 Informations: Name : Gravy Media Cms 1.07 Download : http://www.gravy-media.com/downloads.php Vulnerability : Multiple Sql Injections & Arbitrary File Download Author : x0r Contact : [email protected] Notes : Proud To Be Italian Greetz : //...

Acute Control Panel 1.0.0 (SQL/RFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Acute Control Panel 1.0.0 SQL/RFI Multiple Remote Vulnerabilities =================================================================== + Remote File Inclusion Vulnerable co...

CVE-2008-6503

CVE-2008-6503 describes multiple XSS vulnerabilities in PrestaShop 1.1.0.3, exploitable via PATH_INFO to (1) admin/login.php and (2) order.php. The vulnerability is a client-side script injection risk, allowing remote attackers to inject arbitrary web script or HTML as described in NVD. Base scor...

Sql injection

Multiple SQL injection vulnerabilities in login.php in Kim Websites 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-1026

CVE-2009-1026 affects Kim Websites 1.0, with SQL injection vulnerabilities in login.php. The issue allows remote attackers to manipulate the database by supplying crafted values for the username or password fields, enabling arbitrary SQL execution. This aligns with the NVD assessment of a high-se...

CVE-2008-6484

SQL injection vulnerability in login.php in Mole Group Taxi Map Script aka Taxi Calc Dist Script allows remote attackers to execute arbitrary SQL commands via the user field...

CVE-2008-6484

SQL injection vulnerability in login.php in Mole Group Taxi Map Script aka Taxi Calc Dist Script allows remote attackers to execute arbitrary SQL commands via the user field...

Kim Websites 1.0 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. Kim Websites 1.0 SQL Injection Vulnerability Authentication bypass Virangar Security Team www.virangar.net -------- Discoverd By : Virangar Security Teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & Ariasecurity team &...

CVE-2008-6465

Multiple cross-site scripting XSS vulnerabilities in login.php in webshell4 in Parallels H-Sphere 3.0.0 P9 and 3.1 P1 allow remote attackers to inject arbitrary web script or HTML via the 1 err, 2 errorcode, and 3 login parameters...