Published: 29/12/2006 Updated: 17/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 770

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Subscribe to Dmxready Secure Login Manager

Multiple SQL injection vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote malicious users to execute arbitrary SQL commands via unspecified parameters to (1) set_preferences.asp, (2) send_password_preferences.asp, and (3) SecureLoginManager/list.asp in the Local-Admin Panel; (4) the sent parameter to (a) login.asp, (b) content.asp, and (c) members.asp in the Remote-WebSite; and (5) the sent parameter to applications/SecureLoginManager/inc_secureloginmanager.asp in the Live Demo.

Vulnerable Product	Search on Vulmon	Subscribe to Product
dmxready dmxready secure login manager 1.0

source: wwwsecurityfocuscom/bid/21788/info DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries A successful exploit could allow an attacker to compromise the application, access or modify data, or explo ...

source: wwwsecurityfocuscom/bid/21788/info DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit ...

source: wwwsecurityfocuscom/bid/21788/info DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit v ...

source: wwwsecurityfocuscom/bid/21788/info DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries A successful exploit could allow an attacker to compromise the application, access or modify data, or exp ...

NVD-CWE-Other http://www.securityfocus.com/bid/21788 http://www.osvdb.org/33333 http://www.osvdb.org/33334 http://www.osvdb.org/33335 http://www.osvdb.org/33336 http://www.osvdb.org/33337 http://www.osvdb.org/33338 https://exchange.xforce.ibmcloud.com/vulnerabilities/31158 http://www.securityfocus.com/archive/1/455353/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/29360/

CVE-2006-6816

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect