EUVD-2007-2890

Malware in sbrugna...

CVE-2007-2898

SQL injection vulnerability in includes/rating.php in 2z Project 0.9.5 allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

CVE-2007-2905

CVE-2007-2905 is a reported SQL injection vulnerability in the 2z Project 0.9.5, affecting the includes/rating.php component. The vulnerability allows remote attackers to execute arbitrary SQL commands via the post_id parameter. Multiple connected sources corroborate this flaw. The documents do n...

CVE-2007-2898

The CVE-2007-2898 entry describes an SQL injection vulnerability in the 2z Project 0.9.5, specifically in the file includes/rating.php where user input from the rating parameter to index.php is unsafely handled. This leads to the possibility of remote attackers executing arbitrary SQL commands. T...

[waraxe-2007-SA#051] - Sql Injection in 2z Project 0.9.5

waraxe-2007-SA051 - Sql Injection in 2z Project 0.9.5 ==================================================================== Author: Janek Vind "waraxe" Date: 23. May 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-51.html Target software description: Vulnerable: 2z Project 0.9.5...

waraxe-2007-SA051.txt

waraxe-2007-SA051 - Sql Injection in 2z Project 0.9.5 ==================================================================== Author: Janek Vind "waraxe" Date: 23. May 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-51.html Target software description: Vulnerable: 2z Project 0.9.5...