7 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbitrary web script or HTML via the Error parameter in 1 login.asp and 2 default.asp...
CVE-2006-1155
Cross-site scripting XSS vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbitrary web script or HTML via the Error parameter in 1 login.asp and 2 default.asp...
CVE-2006-1155
Cross-site scripting XSS vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbitrary web script or HTML via the Error parameter in 1 login.asp and 2 default.asp...
CVE-2006-1156
The CVE-2006-1156 entry concerns the Manas Tungare Site Membership Script (pre-8 March 2006) with a SQL injection vulnerability. The Username parameter in login.asp is exploitable to run arbitrary SQL commands, allowing remote attackers to impact the backend database. The connected documents prov...
CVE-2006-1155
CVE-2006-1155 affects the Manas Tungare Site Membership Script. The vulnerability is a stored-reflected cross-site scripting (XSS) in the Error parameter of login.asp and default.asp, reported as exploitable before 8 March 2006. The connected documents provide the basic description and CVSS-like ...
CVE-2006-1155: Undefined Security Weakness
Cross-site scripting XSS vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbitrary web script or HTML via the Error parameter in 1 login.asp and 2 default.asp...
CVE-2006-1156: Undefined Security Weakness
SQL injection vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to execute arbitrary SQL commands via the Username parameter in login.asp...