CVE-2006-5763

This CVE covers PHP remote file inclusion in Free File Hosting 1.1 (and possibly earlier) where enabling register_globals allows an attacker to pass a URL in the AD_BODY_TEMP parameter to login.php, register.php, or send.php to execute arbitrary PHP code. The issue also notes that Vector 1 affect...

CVE-2005-1904

SQL injection vulnerability in login.asp in JiRo's Upload System JUS 1 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2005-1904

SQL injection vulnerability in login.asp in JiRo's Upload System JUS 1 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2005-1904

CVE-2005-1904 affects JiRo's Upload System (JUS) version 1, where login.asp is vulnerable to SQL injection via the password parameter, enabling remote attackers to execute arbitrary SQL commands. Root cause is unsafe handling/concatenation of the password input in the login logic, leading to comm...

CVE-2005-1904: Undefined Security Weakness

SQL injection vulnerability in login.asp in JiRo's Upload System JUS 1 allows remote attackers to execute arbitrary SQL commands via the password parameter...

PT-2005-2861 · Jiro · Jiro'S Upload System

Name of the Vulnerable Software and Affected Versions: JiRo's Upload System JUS version 1 Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the password parameter in the login.asp file. Recommendations: For JiRo's Upload System JUS version 1, avoid...

[SA15564] JiRo's Upload System "password" SQL Injection Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...