EUVD-2009-3133

Malware in sbrugna...

Sql injection

SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands via the Browse parameter in a vote action...

CVE-2009-3150

SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands via the Browse parameter in a vote action...

CVE-2009-3150: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Multi Website 1.5 allows remote attackers to execute arbitrary SQL commands via the Browse parameter in a vote action...

Sql injection

Multiple SQL injection vulnerabilities in iGaming 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the browse parameter to 1 previews.php and 2 reviews.php, and the 3 id parameter to index.php in a viewarticle action...

CVE-2007-6379

BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, which reveals the installation path in an error message...

CVE-2007-6379: Undefined Security Weakness

BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, which reveals the installation path in an error message...

CVE-2006-3271

Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the 1 country and 2 sortby parameters in a searchresults.php; 3 browse parameter in b featuredphotos.php; 4 cid parameter in c products.php, d index.php, and e newsdesc.php...

CVE-2006-3183: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in MobeScripts Mobile Space Community 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 browse parameter, which is not filtered in the resulting error message, and multiple unspecified input fields, includi...

CVE-2006-3181

SQL injection vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to execute arbitrary SQL commands via the browse parameter...

CVE-2006-3181: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to execute arbitrary SQL commands via the browse parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in phpODP 1.5h allows remote attackers to inject arbitrary web script via the browse parameter...

CVE-2006-2396

Cross-site scripting XSS vulnerability in phpODP 1.5h allows remote attackers to inject arbitrary web script via the browse parameter...

CVE-2006-2396: Undefined Security Weakness

Cross-site scripting XSS vulnerability in phpODP 1.5h allows remote attackers to inject arbitrary web script via the browse parameter...