CVE-2008-4303

Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow remote attackers to execute arbitrary SQL commands via the loginForm parameter to general/login.php, and unspecified other vectors...

CVE-2008-4303: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow remote attackers to execute arbitrary SQL commands via the loginForm parameter to general/login.php, and unspecified other vectors...

Pre Shopping Mall Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ======================================================== Pre Shopping Mall Insecure Cookie Handling Vulnerability ========================================================...

CVE-2006-6043: Undefined Security Weakness

PHP file inclusion vulnerability in loginform-inc.php in Oliver formerly Webshare 1.2.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the confmotdfile parameter, which is accessed by the...

CVE-2006-1495: Undefined Security Weakness

SQL injection vulnerability in general/sendpassword.php in 1 PHPCollab 2.4 and 2.5.rc3, and 2 NetOffice 2.5.3-pl1 and 2.6.0b2 allows remote attackers to execute arbitrary SQL commands via the loginForm parameter in the "forgotten password" option...