EUVD-2007-4609

Malware in sbrugna...

Sql injection

SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-4627

SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-4627

CVE-2007-4627 describes an SQL injection in ABC eStore 3.0’s index.php, exploitable via the cat_id parameter to execute arbitrary SQL. Root cause: unsafe SQL construction in index.php. Impact stated as partial confidentiality, integrity, and availability. NVD/metrics cite a CVSS v2 base score 7.5...

CVE-2007-4627

SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter...