8 matches found
EUVD-2006-0498
Malware in sbrugna...
CVE-2006-0491
SQL injection vulnerability in SZUserMgnt.class.php in SZUserMgnt 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter...
Sql injection
SQL injection vulnerability in SZUserMgnt.class.php in SZUserMgnt 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2006-0491
SQL injection vulnerability in SZUserMgnt.class.php in SZUserMgnt 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2006-0491
CVE-2006-0491 describes an SQL injection in SZUserMgnt.class.php of SZUserMgnt 1.4, allowing remote attackers to execute arbitrary SQL via the username parameter. The vulnerability arises from improper handling of user input in the login-related component, enabling PII/data exposure or broader da...
[SA18666] SZUserMgnt "username" SQL Injection Vulnerability
TITLE: SZUserMgnt "username" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18666 VERIFY ADVISORY: http://secunia.com/advisories/18666/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: SZUserMgnt 1.x http://secunia.com/product/7188/...
SZUserMgnt 1.4 - 'Username' SQL Injection
source: https://www.securityfocus.com/bid/16454/info SZUserMgnt is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the...
[eVuln] SZUserMgnt Authentication Bypass
New eVuln Advisory: SZUserMgnt Authentication Bypass http://evuln.com/vulns/53/summary.html --------------------Summary---------------- Software: SZUserMgnt Sowtware's Web Site: http://www.subzane.com Versions: 1.4 Critical Level: Moderate Type: SQL Injection Class: Remote Status: Unpatched...