EUVD-2006-2039

Malware in sbrugna...

CVE-2006-2038

Multiple SQL injection vulnerabilities in ampleShop 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 RecordID parameter in a CustomeraddressesRecordAction.cfm and b youraccount.cfm; 2 solus parameter in c detail.cfm; and 3 cat parameter in d category.cfm...

Sql injection

Multiple SQL injection vulnerabilities in ampleShop 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 RecordID parameter in a CustomeraddressesRecordAction.cfm and b youraccount.cfm; 2 solus parameter in c detail.cfm; and 3 cat parameter in d category.cfm...

CVE-2006-2038

ampleShop 2.1 and earlier are affected by multiple SQL injection vulnerabilities. The CVE-2006-2038 entry states remote attackers can execute arbitrary SQL via (1) RecordID in Customeraddresses_RecordAction.cfm and youraccount.cfm; (2) solus in detail.cfm; and (3) cat in category.cfm. Root cause:...

CVE-2006-2038

Multiple SQL injection vulnerabilities in ampleShop 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 RecordID parameter in a CustomeraddressesRecordAction.cfm and b youraccount.cfm; 2 solus parameter in c detail.cfm; and 3 cat parameter in d category.cfm...