EUVD-2014-2121

Malware in sbrugna...

CVE-2014-2081

Multiple SQL injection vulnerabilities in the login in webreports/cgi-bin/InfoStation.cgi in Innovative vtls-Virtua before 2013.2.4 and 2014.x before 2014.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter...

CVE-2014-2081

CVE-2014-2081 affects VTLS Virtua InfoStation.cgi (web_reports/cgi-bin/InfoStation.cgi). The NVD entry describes multiple SQL injection vulnerabilities in the login functionality, exploitable via the username or password parameter, allowing remote attackers to issue arbitrary SQL commands. Affect...

CVE-2014-2081: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the login in webreports/cgi-bin/InfoStation.cgi in Innovative vtls-Virtua before 2013.2.4 and 2014.x before 2014.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter...

PT-2014-4472

Name of the Vulnerable Software and Affected Versions Innovative vtls-Virtua versions prior to 2013.2.4 Innovative vtls-Virtua versions 2014.x prior to 2014.1.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the username or password parameter...