Filtered by vendor Duware Subscriptions
Total 23 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2006-2302 1 Duware 1 Dugallery 2025-04-03 N/A
SQL injection vulnerability in admin_default.asp in DUGallery 2.x allows remote attackers to execute arbitrary SQL commands via the (1) Login or (2) password field.
CVE-2006-4487 1 Duware 1 Dupoll 2025-04-03 N/A
DUware DUpoll 3.0 and 3.1 stores _private/Dupoll.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords.
CVE-2006-2132 1 Duware 1 Duclassified 2025-04-03 N/A
SQL injection vulnerability in detail.asp in DUclassified allows remote attackers to execute arbitrary SQL commands via the iPro parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.