EUVD-2008-3406

Malware in sbrugna...

CVE-2008-3420

The CVE-2008-3420 entry concerns Mobius for Mimsy XG 1 1.4.4.1 and earlier. The vulnerability is described as multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands. The affected components are the browse.php id parameter and detail.php s parameter within an ex...

CVE-2008-3420: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Mobius for Mimsy XG 1 1.4.4.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to browse.php or 2 the s parameter in an exhibitions action to detail.php...