EUVD-2006-2245

Malware in sbrugna...

EUVD-2006-2244

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary SQL commands via the ID parameter to 1 comentarii.php or 2 view.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrary web script or HTML via the ID parameter to 1 comentarii.php or 2 view.php. NOTE: this issue might be resultant from SQL injection...

CVE-2006-2244

Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary SQL commands via the ID parameter to 1 comentarii.php or 2 view.php...

CVE-2006-2243

The vulnerability CVE-2006-2243 affects Web4Future News Portal and involves stored/reflected XSS by manipulating the ID parameter in two pages, comentarii.php and view.php. The root cause is insufficient input validation that allows arbitrary script/HTML injection, enabling remote attackers to ex...

CVE-2006-2244

The CVE-2006-2244 entry concerns the Web4Future News Portal with multiple SQL injection flaws reachable via the ID parameter in two scripts (comentarii.php and view.php). The root cause is unsafely constructed SQL queries that allow remote attackers to alter the database, with impact described as...

CVE-2006-2243

Multiple cross-site scripting XSS vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrary web script or HTML via the ID parameter to 1 comentarii.php or 2 view.php. NOTE: this issue might be resultant from SQL injection...

CVE-2006-2244: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary SQL commands via the ID parameter to 1 comentarii.php or 2 view.php...

CVE-2006-2243: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrary web script or HTML via the ID parameter to 1 comentarii.php or 2 view.php. NOTE: this issue might be resultant from SQL injection...