EUVD-2009-1947

Malware in sbrugna...

CVE-2009-1951

The CVE-2009-1951 entry concerns PropertyMax Pro FREE 0.3, where a Cross-site Scripting (XSS) vulnerability exists in index.php. The issue allows remote attackers to inject arbitrary web script or HTML via the pl parameter in a mi action. This is documented across multiple sources (NVD entry and ...

CVE-2009-1952: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the administrative login feature in PropertyMax Pro FREE 0.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

CVE-2009-1951: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in PropertyMax Pro FREE 0.3 allows remote attackers to inject arbitrary web script or HTML via the pl parameter in a mi action...