CVE-2006-5628

SQL injection vulnerability in login.asp in UNISOR Content Management System CMS allows remote attackers to execute arbitrary SQL commands via the 1 user or 2 pass fields...

CVE-2006-5628

SQL injection vulnerability in login.asp in UNISOR Content Management System CMS allows remote attackers to execute arbitrary SQL commands via the 1 user or 2 pass fields...

CVE-2006-5628

CVE-2006-5628 describes a SQL injection vulnerability in UNISOR Content Management System (CMS) in login.asp, exploitable via the (1) user or (2) pass fields, allowing remote execution of arbitrary SQL commands. The vulnerability affects UNISOR CMS as documented by NVD/CVE records; the provided r...

UNISOR CMS sql injection

Tunis the 26/10/2006 bug found by fireboy product:UNISOR CMS vendor:www.unisor.nl there is an sql injection problem in UNISOR CMS login page and it can be exploited to gain admin privileges. exploit: user: 'or''=' pass: 'or''=' example:http://www.target.com/unisor/login.asp thx...

UNISOR-cms.txt

Tunis the 26/10/2006 bug found by fireboy product:UNISOR CMS vendor:www.unisor.nl there is an sql injection problem in UNISOR CMS login page and it can be exploited to gain admin privileges. exploit: user: 'or''=' pass: 'or''=' example:http://www.target.com/unisor/login.asp thx...