CVE-2015-0918

Cross-site scripting XSS vulnerability in the administrative backend in Sefrengo before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter to backend/main.php...

EUVD-2015-0927

Malware in sbrugna...

EUVD-2015-5069

Malware in sbrugna...

EUVD-2015-1563

Malware in sbrugna...

EUVD-2015-0926

Malware in sbrugna...

CVE-2015-0919

Multiple SQL injection vulnerabilities in the administrative backend in Sefrengo before 1.6.1 allow remote administrators to execute arbitrary SQL commands via the 1 idcat or 2 idclient parameter to backend/main.php...

Sefrengo SQL Injection Vulnerability

Sefrengo is an open source web content management system CMS based on PHP and MySql. The system supports WYSIWYG editors, image uploads and more. A SQL injection vulnerability exists in versions of Sefrengo prior to 1.6.5 beta2. A remote attacker can exploit this vulnerability to execute arbitrar...

Sql injection

SQL injection vulnerability in Sefrengo before 1.6.5 beta2...

CVE-2015-5052

SQL injection vulnerability in Sefrengo before 1.6.5 beta2...

CVE-2015-5052

SQL injection vulnerability in Sefrengo before 1.6.5 beta2...

CVE-2015-5052

The connected sources confirm a SQL injection vulnerability in Sefrengo prior to version 1.6.5 beta2. The flaw affects the web CMS (PHP/MySQL) and, if exploitable, allows an attacker to execute arbitrary SQL commands remotely, with the impact described as affecting confidentiality, integrity, and...

CVE-2015-5052

SQL injection vulnerability in Sefrengo before 1.6.5 beta2...

PT-2017-6807

Name of the Vulnerable Software and Affected Versions Sefrengo versions prior to 1.6.5 beta2 Description A SQL injection issue has been identified. Recommendations For versions prior to 1.6.5 beta2, update to version 1.6.5 beta2 or later to resolve the issue...

CVE-2015-5052: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Sefrengo before 1.6.5 beta2...

Multiple SQL Injection Vulnerabilities in Sefrengo CMS

Sefrengo CMS is a content management system. Sefrengo CMS has multiple SQL injection vulnerabilities that could be exploited by remote attackers to submit specially crafted SQL queries to manipulate or obtain database data...

CVE-2015-1428

Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow 1 remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to backend/main.php or 2 remote authenticated users to execute arbitrary SQL commands via the valueid parameter in a savevalue action to...

Sql injection

Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow 1 remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to backend/main.php or 2 remote authenticated users to execute arbitrary SQL commands via the valueid parameter in a savevalue action to...

CVE-2015-1428

Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow 1 remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to backend/main.php or 2 remote authenticated users to execute arbitrary SQL commands via the valueid parameter in a savevalue action to...

CVE-2015-1428

Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow 1 remote attackers to execute arbitrary SQL commands via the sefrengo cookie in a login to backend/main.php or 2 remote authenticated users to execute arbitrary SQL commands via the valueid parameter in a savevalue action to...

CVE-2015-1428

Sefrengo CMS (before 1.6.2) has multiple SQL injection vulnerabilities. Exploitable via cookies (sefrengo cookie during login to backend/main.php) or via value_id in a save_value action to backend/main.php; vulnerable code paths include /backend/external/phplib/ct_sql.inc and /backend/inc/class.v...