EUVD-2009-3242

Malware in sbrugna...

EUVD-2009-3238

Malware in sbrugna...

CVE-2009-3259

CVE-2009-3259 affects RASH Quote Management System (RQMS) 1.2.2. The vulnerability is multiple SQL injections in three inputs: (1) the search parameter in a search action, (2) the quote parameter in a quote addition, and (3) a User_Name cookie in unspecified administrative actions. The result is ...

CVE-2009-3259

Multiple SQL injection vulnerabilities in RASH Quote Management System RQMS 1.2.2 allow remote attackers to execute arbitrary SQL commands via 1 the search parameter in a search action, 2 the quote parameter in a quote addition, or 3 a UserName cookie in unspecified administrative actions. NOTE:...

CVE-2009-3255

SQL injection vulnerability in RASH Quote Management System RQMS 1.2.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an admin action to the default URI...

Sql injection

SQL injection vulnerability in RASH Quote Management System RQMS 1.2.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an admin action to the default URI...

CVE-2009-3255

SQL injection vulnerability in RASH Quote Management System RQMS 1.2.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an admin action to the default URI...

CVE-2009-3255

Technical details about CVE-2009-3255 are not publicly available in the provided documents. Monitor for updates; the supplied materials do not reveal affected products/versions, root cause specifics, exploit information, or remediation guidance.

CVE-2009-3259: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in RASH Quote Management System RQMS 1.2.2 allow remote attackers to execute arbitrary SQL commands via 1 the search parameter in a search action, 2 the quote parameter in a quote addition, or 3 a UserName cookie in unspecified administrative actions. NOTE:...

CVE-2009-3255: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in RASH Quote Management System RQMS 1.2.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an admin action to the default URI...