EUVD-2008-6244

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the logmbr parameter aka login field or 2 the mdpmbr parameter aka pass or "Mot de passe" field. NOTE: some of these details are obtained from third party...

CVE-2008-6274

Multiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the logmbr parameter aka login field or 2 the mdpmbr parameter aka pass or "Mot de passe" field. NOTE: some of these details are obtained from third party...

CVE-2008-6274

CVE-2008-6274: Multiple SQL injection vulnerabilities in index.php of FamilyProject 2.0 allow remote callers to inject SQL via logmbr (login) or mdpmbr (password) parameters. Root cause appears to be unsanitized user input in these fields; impacts include potential partial disclosure/integration/...

CVE-2008-6274: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in FamilyProject 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the logmbr parameter aka login field or 2 the mdpmbr parameter aka pass or "Mot de passe" field. NOTE: some of these details are obtained from third party...

familyproject-sql.txt

--------------------------------------Mor0ccan nightamres--------------------------------------------- Script : familyproject V3rs!0n : 2.0 Download : http://www.mjcreation.fr/familyproject/ Auth0r : The5p3ctrum -----------------------------------------------------------------------------------...