176 matches found
CVE-2008-5926
Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the 1 login parameter aka user field or the 2 password parameter aka pass field. NOTE: some of these details are obtained from third party information...
CVE-2008-5926
Multiple SQL injection vulnerabilities in login.asp in ASP-DEv Internal E-Mail System allow remote attackers to execute arbitrary SQL commands via the 1 login parameter aka user field or the 2 password parameter aka pass field. NOTE: some of these details are obtained from third party information...
CVE-2008-5926
CVE-2008-5926 affects the ASP-DEv Internal E-Mail System, where multiple SQL injection flaws exist in login.asp that allow remote attackers to alter the database by manipulating the login (user) or password fields. The NVD entry reports a base score of 7.5 (HIGH) with network access and LOW attac...
Citrix Broadcast Server SQL injection
login.asp SQL injection...
CVE-2008-5591
CVE-2008-5591 describes a Cross-site scripting (XSS) vulnerability in login.asp of Nightfall Personal Diary 1.0, allowing remote attackers to inject arbitrary web script or HTML via the username parameter (and possibly other login fields). The affected component is the login page (login.asp) and ...
Sql injection
SQL injection vulnerability in admin/login.asp in Professional Download Assistant 0.1 allows remote attackers to execute arbitrary SQL commands via the 1 uname parameter aka user field or the 2 psw parameter aka passwd field. NOTE: some of these details are obtained from third party information...
Sql injection
SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the email parameter...
CVE-2008-5571
CVE-2008-5571 describes an SQL injection vulnerability in the web app Professional Download Assistant 0.1 , specifically in admin/login.asp . An attacker can pass crafted values in the two fields, uname (user) or psw (passwd), to cause arbitrary SQL execution on the backend database. This can lea...
CVE-2008-5222
CVE-2008-5222 is a SQL injection vulnerability in login.asp of Dvbbs 8.2.0, exploitable via the username parameter to execute arbitrary SQL remotely. The NVD entry shows a CVSSv2 base score of 7.5 (HIGH), with network access, no authentication, and partial impacts on confidentiality, integrity, a...
Unfixed XSS vulnerability at www.icefan.ca
Security researcher Persian Fox, has submitted on 09/10/2008 a cross-site-scripting XSS vulnerability affecting www.icefan.ca, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/09/2009. It is currently...
Sql injection
Multiple SQL injection vulnerabilities in admin/login.asp in E. Z. Poll 2 allow remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-3082
Cross-site scripting XSS vulnerability in UPM/English/login/login.asp in Commtouch Enterprise Anti-Spam Gateway 4 and 5 allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...
CVE-2008-3082
Cross-site scripting XSS vulnerability in UPM/English/login/login.asp in Commtouch Enterprise Anti-Spam Gateway 4 and 5 allows remote attackers to inject arbitrary web script or HTML via the PARAMS parameter...
Unfixed XSS vulnerability at proposalcentral.altum.com
Security researcher Reelix, has submitted on 07/08/2008 a cross-site-scripting XSS vulnerability affecting proposalcentral.altum.com, which at the time of submission ranked 1129203 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/08/2008. It ...
CVE-2008-2861
Multiple cross-site scripting XSS vulnerabilities in eLineStudio Site Composer ESC 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topic and 2 button parameters to ansFAQ.asp and the 3 id and 4 txtEmail parameters to login.asp...
aeries-sqlxss.txt
Discovered By : Arsalan Emamjomehkashan aeries browser interfaceABI 3.8.3.14 Remote SQL Injection Website:http://aeries.com/ SQL injection: GradebookOptions.asp?GrdBk=SQL loginproc.asp If you post variable "SchlCode" XSS: UserName variable on loginproc.asp and usr on Login.asp...
Nukedit utilities/login.asp email Parameter SQL Injection
The remote host is running Nukedit, a content management system written in ASP. The version of Nukedit installed on the remote host fails to sanitize user input to the 'email' parameter of the 'utilities/login.asp' script before using it in a database query. An unauthenticated attacker may be abl...
CVE-2008-0543
CVE-2008-0543 describes multiple SQL injection vulnerabilities in Pre Dynamic Institution . Remote attackers can execute arbitrary SQL commands through the (1) sloginid and (2) spass parameters to login.asp and siteadmin/login.asp . The reports do not provide explicit root cause details or confir...
CVE-2008-0487
CVE-2008-0487 involves multiple SQL injection vulnerabilities in login.asp of ASPired2Protect. The vulnerability allows remote attackers to append or modify SQL commands via the (1) username and (2) password parameters, potentially exposing or altering data. The primary affected component is the ...