EUVD-2009-4660

Malware in sbrugna...

CVE-2009-4697

Multiple cross-site scripting XSS vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbitrary web script or HTML via the 1 order parameter in a ulist action and the 2 fid parameter in a viewforum action...

Sql injection

SQL injection vulnerability in index.php in RadNICS Gold 5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action...

CVE-2009-4696

SQL injection vulnerability in index.php in RadNICS Gold 5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbitrary web script or HTML via the 1 order parameter in a ulist action and the 2 fid parameter in a viewforum action...

CVE-2009-4696

SQL injection vulnerability in index.php in RadNICS Gold 5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action...

CVE-2009-4697

Multiple cross-site scripting XSS vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbitrary web script or HTML via the 1 order parameter in a ulist action and the 2 fid parameter in a viewforum action...

CVE-2009-4697

CVE-2009-4697 concerns multiple XSS vulnerabilities in RadNICS Gold 5, specifically in index.php. The affected vectors are the (1) order parameter in a ulist action and (2) the fid parameter in a view_forum action, enabling remote attackers to inject arbitrary script/HTML. The public data consist...

CVE-2009-4696

RadNICS Gold 5 contains a SQL injection in index.php via the fid parameter in the view_forum action, allowing remote attackers to execute arbitrary SQL commands. No remediation details are provided in the supplied documents.

CVE-2009-4696: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in RadNICS Gold 5 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a viewforum action...

CVE-2009-4697: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in index.php in RadNICS Gold 5 allow remote attackers to inject arbitrary web script or HTML via the 1 order parameter in a ulist action and the 2 fid parameter in a viewforum action...