EUVD-2008-4168

Malware in sbrugna...

EUVD-2008-4169

Malware in sbrugna...

CVE-2008-4186

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the iddoc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4185

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter in a documentos action, a different vector than CVE-2008-3213...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in webCMS Portal Edition allows remote attackers to inject arbitrary web script or HTML via the patron parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4186

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the iddoc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4185

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter in a documentos action, a different vector than CVE-2008-3213...

CVE-2008-4185: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter in a documentos action, a different vector than CVE-2008-3213...

CVE-2008-4184: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in webCMS Portal Edition allows remote attackers to inject arbitrary web script or HTML via the patron parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4186: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in webCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the iddoc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

WebCMS Portal Edition (index.php id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ WebCMS Portal Edition index.php id Blind SQL Injection Exploit ================================================================ !/usr/bin/perl -W webCMS Portal Edition...

CVE-2008-3213

The provided connected documents confirm a SQL injection vulnerability in WebCMS Portal Edition specifically in secciones/tablon/tablon.php, exploitable via the id parameter passed to portal/index.php in a tablon action. The root cause is unsanitized input leading to arbitrary SQL execution. Repo...

CVE-2008-3213: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter to portal/index.php in a tablon action. NOTE: some of these details are obtained from third party information...