EUVD-2010-5003

Malware in sbrugna...

CVE-2010-5039

SQL injection vulnerability in control/adminlogin.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter aka the UserName field. NOTE: some of these details are obtained from third party information...

CVE-2010-5039

CVE-2010-5039 affects ScriptsFeed Recipes Listing Portal 1.0, via control/admin_login.php, where the loginid parameter (UserName field) can be used to perform SQL injection. Root cause: improper input handling that allows arbitrary SQL execution. Impact: remote attackers could run arbitrary SQL c...

CVE-2010-5039

SQL injection vulnerability in control/adminlogin.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter aka the UserName field. NOTE: some of these details are obtained from third party information...

CVE-2010-5039: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in control/adminlogin.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter aka the UserName field. NOTE: some of these details are obtained from third party information...

PT-2011-1974

Name of the Vulnerable Software and Affected Versions ScriptsFeed Recipes Listing Portal version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the loginid parameter, also known as the UserName field, in the control/admin login.php file...

Unrestricted file upload

Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a recipe photo, then accessing it via a direct request to the file in pictures/...

CVE-2008-6943: Improper Input Validation

Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a recipe photo, then accessing it via a direct request to the file in pictures/...

ScriptsFeed (SF) Recipes Listing Portal - Arbitrary File Upload

ScriptsFeed SF Recipes Listing Portal - Arbitrary File Upload ScriptsFeed SF Recipes Listing Portal Remote File Upload ---------------------------------------------------------- Discovered By: ZoRLu Date: 13.11.2008 Home: www.z0rlu.blogspot.com contact: [email protected] N0T: YALNIZLIK, YiTiRD...