EUVD-2008-4336

Malware in sbrugna...

Sql injection

SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum aka PHP Forum or pForum 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4355

The CVE-2008-4355 issue affects Powie PSCRIPT Forum (aka PHP Forum or pForum) versions ≤ 1.30, where showprofil.php is vulnerable to SQL injection via the id parameter. The underlying flaw allows remote attackers to manipulate SQL queries and potentially impact data integrity and confidentiality....

CVE-2008-4355

SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum aka PHP Forum or pForum 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-4355: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in showprofil.php in Powie PSCRIPT Forum aka PHP Forum or pForum 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...