EUVD-2007-3963

Malware in sbrugna...

Sql injection

SQL injection vulnerability in index.php in BlogSite Professional aka Blog System 1.x allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2007-3979

SQL injection vulnerability in index.php in BlogSite Professional aka Blog System 1.x allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2007-3979

SQL injection vulnerability in index.php in BlogSite Professional aka Blog System 1.x allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2007-3979

CVE-2007-3979 affects BlogSite Professional (aka Blog System) 1.x. The vulnerability is a SQL injection in index.php via the news_id parameter , allowing remote attackers to execute arbitrary SQL commands. This is a straightforward input-injection flaw in the web application layer that leads to p...