EUVD-2006-6845

Malware in sbrugna...

EUVD-2006-6844

Malware in sbrugna...

EUVD-2002-1699

Malware in sbrugna...

Spooky 2.7 login/register.asp SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21822/info Spooky Login is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A successful...

CVE-2006-6861

Multiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to execute arbitrary SQL commands via 1 the UserUpdate parameter to login/register.asp or 2 unspecified parameters to includes/aregister.asp...

CVE-2006-6861

CVE-2006-6861: Outfront Spooky Login 2.7 contains multiple SQL injection vulnerabilities. Remote attackers can execute arbitrary SQL via (1) UserUpdate in login/register.asp or (2) unspecified parameters in includes/a_register.asp. No remediation details are provided in the connected documents.

CVE-2006-6862

CVE-2006-6862 documents multiple cross-site scripting (XSS) vulnerabilities in the Web app Outfront Spooky Login 2.7 . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to two pages: login/login.asp and login/register.asp . The core vulnerability ...

CVE-2006-6862

Multiple cross-site scripting XSS vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 login/login.asp or 2 login/register.asp...

CVE-2006-6861: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to execute arbitrary SQL commands via 1 the UserUpdate parameter to login/register.asp or 2 unspecified parameters to includes/aregister.asp...

CVE-2006-6862: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 login/login.asp or 2 login/register.asp...

CVE-2006-6861

Multiple SQL injection vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to execute arbitrary SQL commands via 1 the UserUpdate parameter to login/register.asp or 2 unspecified parameters to includes/aregister.asp...

CVE-2006-6862

Multiple cross-site scripting XSS vulnerabilities in Outfront Spooky Login 2.7 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to 1 login/login.asp or 2 login/register.asp...

Spooky 2.7 - loginregister.asp SQL Injection

Spooky 2.7 - loginregister.asp SQL Injection source: https://www.securityfocus.com/bid/21822/info Spooky Login is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues, because the application fails to properly sanitize user-supplied input. A...

CVE-2002-1720

SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field...

CVE-2002-1720

CVE-2002-1720 affects Spooky Login 2.0–2.5 and involves a SQL injection in the password field that can bypass authentication and grant privileges. The CVE is documented across CVE/NVD/CVE List entries with a base score of 7.5 ( HIGH ), network vector, low attack complexity, and partial impacts to...

CVE-2002-1720: Undefined Security Weakness

SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field...

CVE-2002-1720

SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field...

[NT] Spooky Login SQL Injection Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...