Show filters
25 Total Results
Displaying 21-25 of 25
Sort by:
Attacker Value
Unknown
CVE-2007-1729
Disclosure Date: March 28, 2007 (last updated October 04, 2023)
SQL injection vulnerability in includes/start.php in Flexbb 1.0.0 10005 Beta Release 1 allows remote attackers to execute arbitrary SQL commands via the flexbb_lang_id COOKIE parameter to index.php.
0
Attacker Value
Unknown
CVE-2006-2848
Disclosure Date: June 06, 2006 (last updated October 04, 2023)
links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct request with a modified txtAdministrativePassword field.
0
Attacker Value
Unknown
CVE-2006-2847
Disclosure Date: June 06, 2006 (last updated October 04, 2023)
SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands via the linkID parameter.
0
Attacker Value
Unknown
CVE-2004-1552
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the eventid parameter to calendar.asp.
0
Attacker Value
Unknown
CVE-2004-1553
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via (1) the username field on the login page or (2) the cat parameter to album.asp. NOTE: it was later reported that vector 1 affects aspWebAlbum 3.2, and the vector involves the txtUserName parameter in a processlogin action to album.asp, as reachable from the login action.
0
