CVE-2006-4478

CVE-2006-4478 describes an SQL injection in Visual Shapers ezContents 2.0.3, affecting headeruserdata.php via the groupname parameter. The underlying issue permits remote attackers to inject arbitrary SQL commands. Documented impact indicates potential data exposure, modification, or other SQL-le...

CVE-2005-4478

The CVE-2005-4478 entries (and related records) document multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier. An attacker can remotely execute arbitrary SQL commands via: (1) menuid parameter to index.php and guestbook.php; and (2) forumid and (3) reporeid_print parameters to print....

MS:A7717324-039B-4478-A8F5-3F2BECC231B5

...