EUVD-2008-1361

Malware in sbrugna...

CVE-2008-1354

The CVE-2008-1354 issue concerns SQL injection in MyIssuesView.asp of Advanced Data Solutions Virtual Support Office-XP (VSO-XP). The vulnerable component is the MyIssuesView.asp page, with the root cause described as unsafe handling of the Issue_ID parameter allowing arbitrary SQL execution. The...

CVE-2008-1354: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP VSO-XP allows remote attackers to execute arbitrary SQL commands via the IssueID parameter...