EUVD-2017-7392

Malware in sbrugna...

CVE-2017-15976

ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604...

Sql injection

ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604...

CVE-2017-15976: Improper Neutralization of Special Elements used in an SQL Command

ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604...

PT-2017-14330

Name of the Vulnerable Software and Affected Versions ZeeBuddy versions 2.x Description The issue allows SQL Injection via the groupid parameter in the "admin/editadgroup.php" API endpoint. Recommendations For ZeeBuddy version 2.x, avoid using the groupid parameter in the affected API endpoint...