CVE-2006-5960: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in accountlogin.asp in A+ Store E-Commerce allow remote attackers to inject arbitrary web script or HTML via the 1 username txtUserName and 2 password txtPassword parameters. NOTE: portions of these details are obtained from third party informatio...

CVE-2006-5450: Undefined Security Weakness

SQL injection vulnerability in index.asp in Kinesis Interactive Cinema System KICS CMS allows remote attackers to execute arbitrary SQL commands via the 1 txtUsername user or 2 txtPassword pass parameters...

CVE-2005-4606: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in checkuser.asp in multiple Web Wiz products including 1 Site News 3.06 and earlier, 2 Journal 1.0 and earlier, 3 Polls 3.06 and earlier, and 4 and Database Login 1.71 and earlier allows remote attackers to execute arbitrary SQL commands via the txtUserName parameter...

CVE-2005-4606

SQL injection vulnerability in checkuser.asp in multiple Web Wiz products including 1 Site News 3.06 and earlier, 2 Journal 1.0 and earlier, 3 Polls 3.06 and earlier, and 4 and Database Login 1.71 and earlier allows remote attackers to execute arbitrary SQL commands via the txtUserName parameter...

CVE-2004-2587: Undefined Security Weakness

login.aspx in SmarterTools SmarterMail 1.6.1511 and 1.6.1529 allows remote attackers to cause a denial of service via a long txtusername parameter, possibly due to a buffer overflow...