CVE-2006-6816: Dmxready Secure Login Manager

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) set_preferences.asp, (2) send_password_preferences.asp, and (3) SecureLoginManager/list.asp in the Local-Admin Panel; (4) the sent parameter to (a) login.asp, (b) content.asp, and (c) members.asp in the Remote-WebSite; and (5) the sent parameter to applications/SecureLoginManager/inc_secureloginmanager.asp in the Live Demo.

Affected products

• Dmxready Dmxready Secure Login Manager: version 1.0 only

Published 2006-12-29. Last modified 2026-06-16.