EUVD-2005-3830

Malware in sbrugna...

EUVD-2005-3831

Malware in sbrugna...

CVE-2005-3836

SQL injection vulnerability in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the announce parameter...

CVE-2005-3835

PHP remote file inclusion vulnerability in support/index.php in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the main parameter...

CVE-2005-3835

The CVE-2005-3835 entry documents a PHP remote file inclusion vulnerability in DeskLance 2.3 and earlier, exploitable through a URL parameter (main) in support/index.php to execute arbitrary PHP code. Affected software: DeskLance (desktop/web app)

CVE-2005-3836

SQL injection vulnerability in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the announce parameter...

CVE-2005-3836

CVE-2005-3836 affects DeskLance 2.3 and earlier. The issue is a SQL injection through the announce parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD CVSS v2 base score is 7.5 (HIGH) with network vectors, low attack complexity, no authentication required, and partial ...

CVE-2005-3835

PHP remote file inclusion vulnerability in support/index.php in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the main parameter...

CVE-2005-3836: Undefined Security Weakness

SQL injection vulnerability in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the announce parameter...

CVE-2005-3835: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in support/index.php in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the main parameter...

DeskLance Vuln.

DeskLance Vuln. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/desklance-vuln.html Vendor:http://www.desklance.com/ affected version: 2.3 and prior Vuln. description: Input passed to the "main" parameter in "index.php" isn't properly verified,...