CVE-2006-6594

SQL injection vulnerability in utilities/usermessages.asp of ScriptMate User Manager 2.0 allows remote attackers to execute arbitrary SQL commands via the mesid parameter. Affected: ScriptMate User Manager 2.0; root cause: improper input handling in mesid. Impact and exploitation details are prov...

CVE-2006-6595

Affected software: ScriptMate User Manager 2.1 and earlier. Vulnerability: Multiple SQL injection flaws allowing remote attackers to execute arbitrary SQL commands via the "Manage Resources" function and possibly other unspecified components. Impact: Unauthorized SQL execution; risk details not q...

CVE-2006-6583

Technical details for CVE-2006-6583 are not provided in the connected documents; monitor for updates.

CVE-2006-6582

CVE-2006-6582 concerns ScriptMate User Manager 2.1 and earlier. The vulnerability set is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary script or HTML via the login action fields (members_username, members_password) in members/default.asp and via the Sea...