Sql injection

Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 usern parameter in a sendpass.php, and the 2 usern and 3 passwd parameters and 4 sfcookie cookie in b login.php and c logged.php...

CVE-2006-0809

Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 usern parameter in a sendpass.php, and the 2 usern and 3 passwd parameters and 4 sfcookie cookie in b login.php and c logged.php...

CVE-2006-0809: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the 1 usern parameter in a sendpass.php, and the 2 usern and 3 passwd parameters and 4 sfcookie cookie in b login.php and c logged.php...

CVE-2006-0685

The checklogin function in login.php in Virtual Hosting Control System VHCS 2.4.7.1 and earlier does not exit when authentication fails, which allows remote attackers to gain unauthorized access...

CVE-2006-0685: Undefined Security Weakness

The checklogin function in login.php in Virtual Hosting Control System VHCS 2.4.7.1 and earlier does not exit when authentication fails, which allows remote attackers to gain unauthorized access...

CVE-2006-0417: Undefined Security Weakness

SQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when gpcmagicquotes is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 username and 2 password parameters...

Sql injection

SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-0311

CVE-2006-0311 is an SQL injection in aoblogger 2.3, exposed via login.php and the username parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. Reported impact aligns with CVSS base metrics (7.5: High; network vector, low complexity, no authentication). Affected...

CVE-2006-0324: Undefined Security Weakness

SQL injection vulnerability in WebspotBlogging 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter to login.php...

CVE-2006-0311: Undefined Security Weakness

SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2006-0182

CVE-2006-0182 affects ACal Calendar Project 2.2.5. The vulnerability in login.php allows remote bypass of authentication by setting the ACalAuthenticate cookie to the literal value “inside,” enabling unauthorized access. Relatedly, CVE-2006-0183 in edit.php permits authenticated users to execute ...

CVE-2006-0182

login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to "inside"...

Authentication flaw

login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to "inside"...

CVE-2006-0182: Undefined Security Weakness

login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to "inside"...

CVE-2006-0135

SQL injection vulnerability in login.php in TheWebForum twf 1.2.1 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the username parameter aka the u variable...

CVE-2006-0135: Undefined Security Weakness

SQL injection vulnerability in login.php in TheWebForum twf 1.2.1 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the username parameter aka the u variable...

CVE-2006-0067

VEGO Links Builder 2.00 and earlier contains a SQL injection vulnerability in login.php via the username parameter. Multiple connected advisories summarize that remote attackers could cause arbitrary SQL commands to be executed on the affected system. The CVE entry notes the vulnerability but doe...

CVE-2006-0067: Undefined Security Weakness

SQL injection vulnerability in login.php in VEGO Links Builder 2.00 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2005-4469: Undefined Security Weakness

Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow remote attackers to execute arbitrary PHP code via 1 the username field in login.php, or the 2 userlanguage, 3 useremail, and 4 usergedcomid parameters in loginregister.php, which is directly inserted into...

CVE-2005-4136

CVE-2005-4136 describes a Cross-site Scripting (XSS) vulnerability in DRZES HMS 3.2, specifically in login.php where the customerEmailAddress parameter can be exploited to inject arbitrary web script/HTML. The issue affects the login process and can be triggered remotely, with a NVD base score of...