EUVD-2014-2686

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in MobFox mAdserve 2.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 editadunit.php, 2 viewadunits.php, or 3 editcampaign.php in www/cp/...

CVE-2014-2654

Multiple SQL injection vulnerabilities in MobFox mAdserve 2.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 editadunit.php, 2 viewadunits.php, or 3 editcampaign.php in www/cp/...

CVE-2014-2654

MobFox mAdserve 2.0 and earlier is affected by CVE-2014-2654 due to insufficient sanitization of the id parameter in PHP scripts (edit_ad_unit.php, view_adunits.php, edit_campaign.php). The vulnerability allows a remote authenticated attacker to inject and execute arbitrary SQL commands against t...

CVE-2014-2654: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MobFox mAdserve 2.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 editadunit.php, 2 viewadunits.php, or 3 editcampaign.php in www/cp/...

MobFox mAdserve SQL注入漏洞

Bugtraq ID:66661 MobFox mAdserve是一款基于WEB的广告服务应用。 MobFox mAdserve存在一个SQL注入漏洞，允许远程攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。 0 MobFox mAdserve 2.0 目前没有详细解决方案： http://www.madserve.org/...