CVE-2006-0108

SQL injection vulnerability in Timecan CMS affects mcl_login.asp, allowing remote attackers to execute arbitrary SQL commands via the email parameter. This is documented with provenance uncertainty (NOTE: provenance unknown; not clear if same issue as CVE-2006-0107). The CVSS-like metrics present...

CVE-2006-0107

CVE-2006-0107 describes a SQL injection in Timecan CMS exploitable via the viewID parameter, enabling remote SQL execution. Related entry CVE-2006-0108 notes a similar injection in Timecan CMS, via the email parameter in mcl_login.asp. Both entries originate from third-party information with uncl...