51 matches found
CVE-2013-2690
SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action...
Sql injection
SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action...
CVE-2013-2690
CVE-2013-2690 is a SQL injection vulnerability in the SynConnect 2.0 login flow of Synchroweb Technology. The flaw affects index.php where an attacker can manipulate the loginid parameter in a logoff action to execute arbitrary SQL commands. Reported in NVD with a base score of 7.5 (HIGH) and net...
SynConnect SQL Injection
Title: ==== SynConnect - SQL Injection vulnerability Credit: ====== Name: Bhadresh Patel Company/affiliation: Cyberoam Technologies Private Limited Website: www.cyberoam.com CVE: ===== Date: ==== 01-03-2013 CRD: ==== CRD-2013-01 Vendor: ====== Synchroweb Technology is a provider of application...
CVE-2010-5039
SQL injection vulnerability in control/adminlogin.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter aka the UserName field. NOTE: some of these details are obtained from third party information...
CVE-2010-5039
SQL injection vulnerability in control/adminlogin.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter aka the UserName field. NOTE: some of these details are obtained from third party information...
CVE-2010-5039
SQL injection vulnerability in control/adminlogin.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter aka the UserName field. NOTE: some of these details are obtained from third party information...
Alibaba Clone Platinum - '/buyer/index.php' SQL Injection
Title: Alibaba Clone Platinum buyer/index.php SQL Injection Vulnerability Author: GuN Published: 2010-14-05 Verified: yes ........../¯¯/.................\¯¯.......... ........./¯.//....................\.¯......... ......../..//.........GuN........\.......... ../´¯/' /´...WJA-TEAM../´...
Alibaba Clone Platinum SQL Injection
Title: Alibaba Clone Platinum buyer/index.php SQL Injection Vulnerability Author: GuN Published: 2010-14-05 Verified: yes ........../¯¯/.................\¯¯.......... ........./¯.//....................\.¯......... ......../..//.........GuN........\.......... ../´¯/' /´...WJA-TEAM../´...
CVE-2007-4239
Cross-site scripting XSS vulnerability in user/forgotPassStep2.jsp in the admin interface in C-SAM oneWallet 21007062007;1.0 allows remote attackers to inject arbitrary web script or HTML via the loginID parameter...
Sql injection
Multiple SQL injection vulnerabilities in wolioCMS allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to member.php in a page action, related to a SELECT statement in common.php; and the 2 loginid parameter uid variable, and possibly the 3 pwd parameter, to...