CVE-2009-1503

CVE-2009-1503 documents multiple SQL injection vulnerabilities in the Tiger DMS (Tiger Document Management System) login.php. The vulnerability allows remote attackers to supply crafted input for the (1) username or (2) password parameters, potentially causing arbitrary SQL execution. The OpenVAS...

CVE-2009-1503: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in login.php in Tiger Document Management System DMS allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

Tiger DMS (Auth Bypass) Login.php Remote SQL Injection Vulnerability

No description provided by source. ============================================================================== DDDDD OOOO SSSS DDDD ZZZZZZ TTTTTTTTT EEEEE A MM MM D D o O S D D Z T E A A M M M M D D o o SSSS D D Z T EEEEE AAAAA M M M D D o o S D D Z T E A A M M DDDD oooO SSSS DDDD ZZZZZZ T EEE...

CVE-2009-1487

SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the loginuser aka username parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the loginuser aka username parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-1487

CVE-2009-1487 describes an SQL injection vulnerability in FunGamez RC1, specifically in pages/login.php where the login_user parameter (username) allows remote attackers to execute arbitrary SQL commands. Root cause: insufficient input validation on the login_user field. Impact stated: arbitrary ...

CVE-2009-1487: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pages/login.php in FunGamez RC1 allows remote attackers to execute arbitrary SQL commands via the loginuser aka username parameter. NOTE: some of these details are obtained from third party information...

Tiger DMS SQL Injection

============================================================================== DDDDD OOOO SSSS DDDD ZZZZZZ TTTTTTTTT EEEEE A MM MM D D o O S D D Z T E A A M M M M D D o o SSSS D D Z T EEEEE AAAAA M M M D D o o S D D Z T E A A M M DDDD oooO SSSS DDDD ZZZZZZ T EEEEE A A M M...

CVE-2008-6764

CVE-2008-6764 describes a reflected XSS in Silentum LoginSys 1.0.0, exploitable via the message parameter in login.php. The vulnerability allows remote attackers to inject arbitrary script/HTML, potentially affecting users who view the crafted parameter. Documents consistently identify the compon...

CVE-2008-6764: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in login.php in Silentum LoginSys 1.0.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2008-6656: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Open Auto Classifieds 1.4.3b allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to listings.php and 2 the username field to login.php...

CVE-2008-6632: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in func/login.php in MercuryBoard 1.1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header $SERVER'HTTPUSERAGENT'...

Sql injection

Multiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design IBD Micro CMS 3.5 aka 0.3.5 allow remote attackers to execute arbitrary SQL commands via 1 the administratorsusername parameter aka the Username field or 2 the administratorspass parameter aka the Password fie...

CVE-2009-1247

SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-6614: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in microcms-admin-login.php in Implied By Design IBD Micro CMS 3.5 aka 0.3.5 allow remote attackers to execute arbitrary SQL commands via 1 the administratorsusername parameter aka the Username field or 2 the administratorspass parameter aka the Password fie...

CVE-2009-1247: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in Acute Control Panel 1.0.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-6581: Improper Authentication

login.php in PhpAddEdit 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the addedit cookie parameter...

CVE-2008-6571: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in LinPHA before 1.3.4 might allow remote attackers to inject arbitrary web script or HTML via 1 newimages.php, 2 login.php, and unspecified vectors...

gravy media CMS 1.07 - Multiple Vulnerabilities

gravy media CMS 1.07 - Multiple Vulnerabilities 0x01 Informations: Name : Gravy Media Cms 1.07 Download : http://www.gravy-media.com/downloads.php Vulnerability : Multiple Sql Injections & Arbitrary File Download Author : x0r Contact : [email protected] Notes : Proud To Be Italian Greetz : //...

Acute Control Panel 1.0.0 (SQL/RFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== Acute Control Panel 1.0.0 SQL/RFI Multiple Remote Vulnerabilities =================================================================== + Remote File Inclusion Vulnerable co...