5 matches found
CVE-2006-6398
Multiple SQL injection vulnerabilities in Superfreaker Studios UPublisher 1.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors in a sendarticle.asp and b printarticle.asp, and the ID parameter to c index.asp and d preferences.asp, different vectors than CVE-2006-58...
CVE-2006-6398
Multiple SQL injection vulnerabilities in Superfreaker Studios UPublisher 1.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors in a sendarticle.asp and b printarticle.asp, and the ID parameter to c index.asp and d preferences.asp, different vectors than CVE-2006-58...
CVE-2006-6399
CVE-2006-6399 concerns Superfreaker Studios UPublisher 1.0, where a SQL injection flaw in the login.asp Username parameter allows remote execution of arbitrary SQL commands. The vulnerability is described across multiple sources (NVD, Red Hat, CVE List) with the same core detail, but no concrete ...
CVE-2006-6398
CVE-2006-6398 has concrete details in connected documents: it describes multiple SQL injection vulnerabilities in Superfreaker Studios UPublisher 1.0. Affected components include viewarticle.asp (CVE-5888) and, for CVE-6398, sendarticle.asp, printarticle.asp, index.asp, and preferences.asp via th...
CVE-2006-5888
CVE-2006-5888 describes an SQL injection vulnerability in the viewarticle.asp component of Superfreaker Studios UPublisher 1.0 . The flaw allows remote attackers to execute arbitrary SQL commands through the ID parameter. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network access,...