EUVD-2006-7070

Malware in sbrugna...

CVE-2006-7088

Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 logonuser.php and 2 updateprofile.php...

CVE-2006-7088

Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 logonuser.php and 2 updateprofile.php...

CVE-2006-7088

CVE-2006-7088 affects Simple PHP Forum prior to 0.4, with multiple SQL injection vulnerabilities – attackers can craft the username parameter to logon_user.php or update_profile.php to execute arbitrary SQL. The available documents confirm remote exploitation potential and the affected components...

CVE-2006-7088: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Simple PHP Forum before 0.4 allow remote attackers to execute arbitrary SQL commands via the username parameter to 1 logonuser.php and 2 updateprofile.php...