EUVD-2008-5744

Malware in sbrugna...

CVE-2008-5774

Summary: CVE-2008-5774 describes multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0. An attacker can abuse the (1) iType parameter to (a) type.asp and (b) type2.asp, and the (2) iPro parameter to detail.asp to execute arbitrary SQL commands. Product versions affected: H...

CVE-2008-5774: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 iType parameter to a type.asp and b type2.asp and the 2 iPro parameter to c detail.asp...