EUVD-2009-3223

Malware in sbrugna...

Sql injection

SQL injection vulnerability in the sections Section module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action...

CVE-2008-1462

SQL injection vulnerability in the sections Section module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action...

CVE-2008-1462

RunCMS is affected in the sections (Section) module where an SQL injection via the artid parameter in a viewarticle action allows remote attackers to execute arbitrary SQL commands. This is evidenced across multiple sources (NVD/NVD mirror and CVE records) describing a SQL injection vulnerability...

CVE-2008-1462: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the sections Section module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action...

XOOPS WF-Section Module print.php articleid Parameter SQL Injection

The remote host is running the WF-Section module, a third-party module for XOOPS. The version of this module installed on the remote host fails to properly sanitize user-supplied input to the 'articleid' parameter of the 'modules/wfsection/print.php' script before using it to build a database...