EUVD-2008-5564

Malware in sbrugna...

Sql injection

SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the 1 txtusername parameter aka username field or the 2 txtpassword parameter aka password field. NOTE: some of these details are obtained from third party...

CVE-2008-5589

CVE-2008-5589 describes an SQL injection in processlogin.asp of Katy Whitton RankEm, exploitable via the txtusername or txtpassword fields to execute arbitrary SQL remotely. The root cause is improper input handling allowing concatenation into SQL queries, leading to potential data disclosure or ...

CVE-2008-5589

SQL injection vulnerability in processlogin.asp in Katy Whitton RankEm allows remote attackers to execute arbitrary SQL commands via the 1 txtusername parameter aka username field or the 2 txtpassword parameter aka password field. NOTE: some of these details are obtained from third party...