15 matches found
EUVD-2002-1699
Malware in sbrugna...
EUVD-2006-6845
Malware in sbrugna...
EUVD-2006-6844
Malware in sbrugna...
Spooky 2.7 login/register.asp SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21822/info Spooky Login is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful...
CVE-2006-6862
Multiple cross-site scripting XSS vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 login/login.asp or 2 login/register.asp...
CVE-2006-6861
Multiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to execute arbitrary SQL commands via 1 the UserUpdate parameter to login/register.asp or 2 unspecified parameters to includes/aregister.asp...
CVE-2006-6862
CVE-2006-6862 documents multiple cross-site scripting (XSS) vulnerabilities in the Web app Outfront Spooky Login 2.7 . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to two pages: login/login.asp and login/register.asp . The core vulnerability ...
CVE-2006-6861
CVE-2006-6861: Outfront Spooky Login 2.7 contains multiple SQL injection vulnerabilities. Remote attackers can execute arbitrary SQL via (1) UserUpdate in login/register.asp or (2) unspecified parameters in includes/a_register.asp. No remediation details are provided in the connected documents.
CVE-2006-6861
Multiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to execute arbitrary SQL commands via 1 the UserUpdate parameter to login/register.asp or 2 unspecified parameters to includes/aregister.asp...
CVE-2006-6862
Multiple cross-site scripting XSS vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 login/login.asp or 2 login/register.asp...
Spooky 2.7 - loginregister.asp SQL Injection
Spooky 2.7 - loginregister.asp SQL Injection source: https://www.securityfocus.com/bid/21822/info Spooky Login is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A...
CVE-2002-1720
SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field...
CVE-2002-1720
CVE-2002-1720 affects Spooky Login 2.0–2.5 and involves a SQL injection in the password field that can bypass authentication and grant privileges. The CVE is documented across CVE/NVD/CVE List entries with a base score of 7.5 ( HIGH ), network vector, low attack complexity, and partial impacts to...
CVE-2002-1720
SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field...
[NT] Spooky Login SQL Injection Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...