EUVD-2009-1025

Malware in sbrugna...

Remote file inclusion

PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-1025

PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

Sql injection

Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to execute arbitrary SQL commands via the linkid parameter to edlink.php, and unspecified other vectors...

CVE-2009-1024

Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to execute arbitrary SQL commands via the linkid parameter to edlink.php, and unspecified other vectors...

CVE-2009-1025: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-1025

PHP remote file inclusion vulnerability in linkadmin.php in Beerwin PHPLinkAdmin 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-1024

Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to execute arbitrary SQL commands via the linkid parameter to edlink.php, and unspecified other vectors...

CVE-2009-1024

Beerwin PHPLinkAdmin 1.0 contains multiple SQL injection vulnerabilities exploitable via the linkid parameter to edlink.php (and unspecified vectors). A remote attacker could potentially manipulate database queries to access or modify data. NVD/NVD-derived data report CVE-2009-1024 with a base sc...

CVE-2009-1025

The CVE-2009-1025 entry concerns Beerwin PHPLinkAdmin 1.0, where a PHP remote file inclusion in linkadmin.php via the page parameter allows remote attackers to execute arbitrary PHP code. The vulnerability is described as a PHP RFI with an impact rating of High (CVSSv2 base score 7.5). Public ref...

CVE-2009-1024: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Beerwin PHPLinkAdmin 1.0 allow remote attackers to execute arbitrary SQL commands via the linkid parameter to edlink.php, and unspecified other vectors...