CVE-2002-1720

CVE-2002-1720 affects Spooky Login 2.0–2.5 and involves a SQL injection in the password field that can bypass authentication and grant privileges. The CVE is documented across CVE/NVD/CVE List entries with a base score of 7.5 ( HIGH ), network vector, low attack complexity, and partial impacts to...

CVE-2006-6861

CVE-2006-6861: Outfront Spooky Login 2.7 contains multiple SQL injection vulnerabilities. Remote attackers can execute arbitrary SQL via (1) UserUpdate in login/register.asp or (2) unspecified parameters in includes/a_register.asp. No remediation details are provided in the connected documents.

CVE-2006-6862

CVE-2006-6862 documents multiple cross-site scripting (XSS) vulnerabilities in the Web app Outfront Spooky Login 2.7 . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to two pages: login/login.asp and login/register.asp . The core vulnerability ...