365 matches found
CVE-2006-1334
CVE-2006-1334 : Maian Weblog 2.0 has SQL injection in print.php and mail.php; vulnerable parameters are (1) entry and (2) email. Remote attackers could potentially execute arbitrary SQL. No patch/mitigation details are provided in the supplied documents; exploitation specifics are not described i...
Sql injection
Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 email or 2 pass parameter to admin/index.php...
CVE-2006-1259
Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 email or 2 pass parameter to admin/index.php...
CVE-2006-1259
Maian Support 1.0 is affected by multiple SQL injection vulnerabilities in admin/index.php, exploitable via the email or pass parameters to authenticate or run arbitrary SQL. The issue arises from improper input handling/sanitization, enabling remote attackers to alter queries and potentially byp...