CVE-2018-11535

An issue was discovered in SITEMAKIN SLAC Site Login and Access Control v1.0. The parameter "myitemsearch" in users.php is exploitable using SQL injection...

Sql injection

Multiple SQL injection vulnerabilities in index.php in Eicra Car Rental-Script, when the pluginid parameter is 4, allow remote attackers to execute arbitrary SQL commands via the 1 users username and 2 passwords parameters...

CVE-2008-4889: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in deV!L'z Clanportal DZCP 1.4.9.6 and earlier allows remote attackers to execute arbitrary SQL commands via the users parameter in an addbuddy operation in a buddys action...

CVE-2005-3479: Undefined Security Weakness

Cross-site scripting XSS vulnerability in login.asp in Ringtail CaseBook 6.1.0 allows remote attackers to inject arbitrary web script or HTML via the users parameter...