EUVD-2005-2011

Malware in sbrugna...

CVE-2005-2009: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands via the 1 ci, 2 d, or 3 m parameter to index.asp, or the 4 bi parameter to blogcomment.asp...

Ublog Reload 1.0.5 - blog_comment.asp?y SQL Injection

Ublog Reload 1.0.5 - blogcomment.asp?y SQL Injection source: https://www.securityfocus.com/bid/13991/info Ublog Reload is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...