265 matches found
CVE-2001-1224: Undefined Security Weakness
getinput in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the database and possibly execute arbitrary commands via a SQL code injection attack...
CVE-2001-0848
join.cfm in e-Zone Media Fuse Talk allows a local user to execute arbitrary SQL code via a semi-colon ; in a form variable...
CVE-2001-0848
CVE-2001-0848 affects join.cfm in e-Zone Media Fuse Talk, where a local user can inject and execute arbitrary SQL through a semicolon in a form variable. The vulnerability is tied to SQL injection in the application’s handling of input data, enabling partial confidentiality/integrity/availability...
RUS-CERT.apache.auth.txt
Vulnerabilities in several Apache authentication modules RUS-CERT has discovered that several Apache authentication modules which use SQL databases to store authentication information are vulnerable to a remote SQL code injection attack. Systems Affected Any Apache server using database-based...
RUS-CERT Advisory 2001-08:01
Vulnerabilities in several Apache authentication modules RUS-CERT has discovered that several Apache authentication modules which use SQL databases to store authentication information are vulnerable to a remote SQL code injection attack. Systems Affected Any Apache server using database-based...