EUVD-2008-5470

Malware in sbrugna...

Sql injection

SQL injection vulnerability in track.php in PHPStore Wholesales aka Wholesale allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5493

SQL injection vulnerability in track.php in PHPStore Wholesales aka Wholesale allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5493

SQL injection vulnerability in track.php in PHPStore Wholesales aka Wholesale allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5493

The CVE-2008-5493 entry documents a SQL injection vulnerability in track.php of PHPStore Wholesales (aka Wholesale). The vulnerable vector is the id parameter, enabling remote attackers to execute arbitrary SQL commands. According to the NVD entry, the impact is assessed as Partial for confidenti...