EUVD-2009-4691

Malware in sbrugna...

CVE-2009-4727: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in x/login in JungleScripts Ajax Short Url Script allows remote attackers to execute arbitrary SQL commands via the username parameter...

Ajax Short URL Script (Auth Bypass) SQL Injection Vulnerability

No description provided by source. - Discovered By: Cicklow - Date: 03.08.2009 Exploit: username: realadminname ' or ' 1=1 password: cicklow note: generally admin name: admin or any user Buy Script: http://junglescripts.com/shorturls.php Admin login Demo: http://href.in/x/login sebug.net...