2 results (0.002 seconds)

CVSS: 9.8EPSS: 3%CPEs: 1EXPL: 3

29 Dec 2005 — SQL injection vulnerability in main.php in Enterprise Heart Enterprise Connector 1.0.2 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the loginid parameter, a different vulnerability than CVE-2005-3875. • https://www.exploit-db.com/exploits/26916 •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 2

29 Nov 2005 — Multiple SQL injection vulnerabilities in Enterprise Connector 1.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the messageid parameter in (1) send.php or (2) a delete action in messages.php. • https://www.exploit-db.com/exploits/26603 •