EUVD-2008-4696

Malware in sbrugna...

EUVD-2009-2911

Malware in sbrugna...

CVE-2009-2923

Multiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to show.php and 2 in parameter to advancedsearch.php...

Directory traversal

Multiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to show.php and 2 in parameter to advancedsearch.php...

CVE-2009-2923

The CVE-2009-2923 entry concerns BitmixSoft PHP-Lance 1.52 with two directory-traversal flaws. The vulnerability allows remote attackers to read arbitrary files by injecting a .. payload in (1) the language parameter to show.php and (2) in the parameter to advanced_search.php. Affected software i...

CVE-2009-2923

Multiple directory traversal vulnerabilities in BitmixSoft PHP-Lance 1.52 allow remote attackers to read arbitrary files via a .. dot dot in the 1 language parameter to show.php and 2 in parameter to advancedsearch.php...

CVE-2008-4716

SQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-4716

CVE-2008-4716 affects BitmixSoft PHP-Lance 1.52; show.php is vulnerable to SQL injection via the catid parameter, enabling remote SQL execution. Base score 7.5 (HIGH; NETWORK attacker, no auth). Exploits are documented (Exploit-DB 6605). No remediation details are provided in the connected docume...

CVE-2008-4716

SQL injection vulnerability in show.php in BitmixSoft PHP-Lance 1.52 allows remote attackers to execute arbitrary SQL commands via the catid parameter...