Cross site scripting

Cross-site scripting XSS vulnerability in Softcomplex PHP Event Calendar 1.5 allows remote authenticated users to inject arbitrary web script or HTML, and corrupt data, via the 1 username and 2 password parameters, which are not sanitized before being written to users.php. NOTE: while this issue...

Sql injection

SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the 1 username and 2 password parameter...

Sql injection

SQL injection vulnerability in LoginValidate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL commands via the Password parameter to login.asp...

CVE-2006-0192

SQL injection vulnerability in LoginValidate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL commands via the Password parameter to login.asp...

CVE-2006-0192

SQL injection vulnerability in LoginValidate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL commands via the Password parameter to login.asp...

CVE-2006-0192: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in LoginValidate.asp in ASPSurvey 1.10 allows remote attackers to execute arbitrary SQL commands via the Password parameter to login.asp...

CVE-2005-3208

Multiple SQL injection vulnerabilities in 1 aeNovo, 2 aeNovoShop and 3 aeNovoWYSI allow remote attackers to execute arbitrary SQL code via a the password parameter in control.asp, and b the strSQL parameter in search.asp, which can enable XSS attacks in resulting error messages...

CVE-2004-2218: Undefined Security Weakness

SQL injection vulnerability in pmwh.php in PHPMyWebHosting 0.3.4 and earlier allows remote attackers to modify SQL statements via the password parameter...

CVE-2002-1845

Cross-site scripting XSS vulnerability in index.php in Yet Another Bulletin Board YaBB 1.40 and 1.41 allows remote attackers to inject arbitrary web script or HTML via the password passwrd parameter...

PT-2005-2861 · Jiro · Jiro'S Upload System

Name of the Vulnerable Software and Affected Versions: JiRo's Upload System JUS version 1 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the password parameter in the login.asp file. Recommendations: For JiRo's Upload System JUS version 1, avoid...

CVE-2005-1904: Undefined Security Weakness

SQL injection vulnerability in login.asp in JiRo's Upload System JUS 1 allows remote attackers to execute arbitrary SQL commands via the password parameter...

PT-2005-2867 · Wwweb Concepts · Wwweb Concepts Events System

Name of the Vulnerable Software and Affected Versions: WWWeb Concepts Events System version 1.0 Description: The issue allows remote attackers to execute arbitrary SQL commands via the password variable in the login.asp file. This can lead to unauthorized access and manipulation of database...

PT-2005-2753 · Zongg · Zongg

Name of the Vulnerable Software and Affected Versions: ZonGG version 1.2 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the password parameter in the "ad/login.asp" endpoint. Recommendations: For ZonGG version 1.2, avoid using th...

PT-2005-2748 · Unknown · Activenews Manager

Name of the Vulnerable Software and Affected Versions: Active News Manager affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the password variable in the "admin/login.asp" API endpoint. This could potentially lead to unauthorized...

CVE-2005-1786: Undefined Security Weakness

SQL injection vulnerability in admin.asp in FunkyASP AD System 1.1 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password parameter...

CVE-2005-1785: Undefined Security Weakness

SQL injection vulnerability in ad/login.asp in ZonGG 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter...

PT-2005-2772 · Os4E · Unknown Product

Name of the Vulnerable Software and Affected Versions: Unknown product by Online Solutions for Educators OS4E affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the password variable in the login.asp file. This could potentially le...

CVE-2005-1750

SQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2005-1750: Undefined Security Weakness

SQL injection vulnerability in login.asp in ezdwc NewsletterEz 3.0 allows remote attackers to execute arbitrary SQL commands via the password parameter...

PT-2005-2754 · Funkyasp · Funkyasp Ad System

Name of the Vulnerable Software and Affected Versions: FunkyASP AD System version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands and gain privileges. This is achieved via the password parameter in the admin.asp file. Recommendations: For FunkyASP AD System...