EUVD-2010-4819

Malware in sbrugna...

zuitu CV2.0_20120502 GetDbRowById() SQL注入漏洞

No description provided by source...

CVE-2010-4854

SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a consume action...

Sql injection

SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a consume action...

CVE-2010-4854

SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a consume action...

CVE-2010-4854

CVE-2010-4854 affects Zuitu 1.6, specifically the Ajax endpoint ajax/coupon.php. The vulnerability arises in the consume action where the id parameter can be exploited to perform SQL injection when magic_quotes_gpc is disabled. This allows remote attackers to potentially execute arbitrary SQL com...

PT-2011-1789

Name of the Vulnerable Software and Affected Versions Zuitu version 1.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in a consume action in the "ajax/coupon.php" file when magic quotes gpc is disabled. Recommendations For...

CVE-2010-4854: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a consume action...