EUVD-2017-7392

Malware in sbrugna...

Sql injection

ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604...

CVE-2008-3604

SQL injection vulnerability in bannerclick.php in ZeeBuddy 2.1 allows remote attackers to execute arbitrary SQL commands via the adid parameter...

CVE-2008-3604

The vulnerability is CVE-2008-3604: an SQL injection in ZeeBuddy 2.1’s bannerclick.php, exploitable via the adid parameter. This is a parameter-based injection that could allow remote attackers to execute arbitrary SQL commands. Public metrics indicate a high/critical impact profile (CVSS v2 base...

CVE-2008-3604

creationtimestamp| type| source ---|---|--- 2008-08-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6230...