EUVD-2008-2911

Malware in sbrugna...

EUVD-2006-2047

Malware in sbrugna...

CVE-2008-2918

SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3...

CVE-2008-2918

The CVE-2008-2918 entry concerns an SQL injection in Application Dynamics Cartweaver 3.0 via the prodId parameter in details.php, allowing remote attackers to execute arbitrary SQL. Root cause appears to be unsanitized user input in the prodId parameter, leading to potential data compromise. Conn...

Sql injection

Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 keywords parameters in a Results.cfm, and the 3 ProdID parameter in b Details.cfm...

CVE-2006-2047

Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allows remote attackers to obtain sensitive information via an invalid 1 secondary, 2 PageNumResults, 3 category, or 4 keywords parameter in a Results.cfm; or an invalid 5 ProdID parameter in b Details.cfm; which reveal the path in...

CVE-2006-2046

Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 keywords parameters in a Results.cfm, and the 3 ProdID parameter in b Details.cfm...

CVE-2006-2046

Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 keywords parameters in a Results.cfm, and the 3 ProdID parameter in b Details.cfm...

CVE-2006-2046

CVE-2006-2046 affects Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier. The vulnerability is a set of SQL injection flaws allowing remote attackers to execute arbitrary SQL via unsanitized input in: (a) Results.cfm with the parameters category and keywords , and (b) Details.cfm with...