Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Simple Customer Relationship Management System 1.0. This affects an unknown part of the file /php-scrm/login.php. The manipulation of the argument Password leads to sql injection. It is possible to initiate the attack...

CVE-2009-1637

profile.php in Simple Customer 1.3 does not require administrative authentication, which allows remote attackers to change the admin e-mail address and password via the email and password parameters...

CVE-2009-1637

The CVE-2009-1637 entry concerns profile.php in Simple Customer 1.3, where administrative authentication is not required. This allows remote attackers to modify the admin email address and password by passing email and password parameters. The NVD data lists a CVSS v2 base score of 6.4 (Network a...

Simple Customer 1.3 Arbitrary Change Admin Password Exploit

No description provided by source. ---- Remote Change admin Password---- ---------------------------- script:Simple Customer 1.3 ---------------------------- Author: ahmadbady email:[email protected] -------------------- download from:http://www.simplecustomer.com/ New Version 1.3...

Simple Customer 1.3 Password Changer

---- Remote Change admin Password---- ---------------------------- script:Simple Customer 1.3 ---------------------------- Author: ahmadbady email:[email protected] -------------------- download from:http://www.simplecustomer.com/ New Version 1.3 -------------------- xpl: coded by ahmadbady...

Realty Web-Base 1.0 SQL Injection

--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 Auth bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM...

Simple Customer 1.3 Arbitrary Change Admin Password Exploit

Exploit for unknown platform in category web applications =========================================================== Simple Customer 1.3 Arbitrary Change Admin Password Exploit =========================================================== ---- Remote Change admin Password----...

CVE-2008-6332

SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter...

Sql injection

SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2008-6332

SQL injection vulnerability in login.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2008-6332

CVE-2008-6332 describes an SQL injection in login.php of Simple Customer 1.2. The vulnerability allows remote attackers to submit a crafted password parameter and execute arbitrary SQL commands, impacting authentication processes and data integrity. The entry notes a high overall severity (CVSS v...

Sql injection

SQL injection vulnerability in login.php in Simple Customer as downloaded on 20081118 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6326

SQL injection vulnerability in login.php in Simple Customer as downloaded on 20081118 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6326

SQL injection vulnerability in login.php in Simple Customer as downloaded on 20081118 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6326

Summary (CVE-2008-6326): A SQL injection flaw exists in login.php of the Simple Customer software, allowing remote attackers to inject arbitrary SQL via the email parameter. This is the root cause: unsanitized user input in a login routine leading to command execution against the database. Impact...

CVE-2008-6081

SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6081

SQL injection vulnerability in contact.php in Simple Customer 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6081

The CVE-2008-6081 entry describes an SQL injection vulnerability in Simple Customer 1.2, specifically in contact.php, where the id parameter can be manipulated by an attacker to execute arbitrary SQL commands. Affects Simple Customer 1.2 (contact.php) with user-controlled id input; impact per NVD...

Simple Customer 1.2 - Authentication Bypass

Simple Customer 1.2 - Authentication Bypass - Simple Customer 1.2 Remort Auth bypass SQL Injection Vulnerability - Discovered By : d3b4g - Greetz : All my freind Go to www.target.compathlogin.php Use following information to bypass login. Write any email Address as email address.It must to be in...