EUVD-2008-2783

Malware in sbrugna...

Sql injection

SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2790

SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-2790

CVE-2008-2790 affects MountainGrafix easyTrade 2.x; detail.php’s id parameter is vulnerable to SQL injection, enabling remote execution of arbitrary SQL commands as described in the sources. A patch is referenced (etv_patch_2_3_2.zip) for remediation. Exploitation details are not provided in the ...

CVE-2008-2790

SQL injection vulnerability in detail.php in MountainGrafix easyTrade 2.x allows remote attackers to execute arbitrary SQL commands via the id parameter...