Ctek, Inc. SkyRouter

CVSS v3 8.6 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Ctek, Inc. Equipment: SkyRouter Vulnerability: Improper Authentication AFFECTED PRODUCTS The following versions of SkyRouter, a wireless and automation solution, are affected: SkyRouter Series 4200 and 4400 all versio...

CVE-2006-5908

The CVE-2006-5908 entry describes multiple SQL injection vulnerabilities in the Yet Another News System (YANS) 0.2b, specifically in the login_user function within yans.func.php. The issue allows remote attackers to execute arbitrary SQL commands through the (1) username or (2) password parameter...