EUVD-2005-0566

Malware in sbrugna...

CVE-2004-2322: Undefined Security Weakness

SQL injection vulnerability in the 1 announce and 2 notes modules of phpWebSite before 0.9.3-2 allows remote attackers to execute arbitrary SQL queries, as demonstrated using the ANNid parameter to the announce module...

CVE-2005-0565

The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting the Image field to reference a PHP file whose name contains a .gif.php extension...

CVE-2005-0565

The vulnerability CVE-2005-0565 affects phpWebSite 0.10.0 and earlier, where the Announce module lets a remote attacker cause arbitrary PHP execution by setting the Image field to reference a PHP file whose name contains a .gif.php extension. OpenVAS/Nessus/Gentoo GLSA entries corroborate remote ...

CVE-2005-0565: Undefined Security Weakness

The Announce module in phpWebSite 0.10.0 and earlier allows remote attackers to execute arbitrary PHP code by setting the Image field to reference a PHP file whose name contains a .gif.php extension...