EUVD-2008-2194

Malware in sbrugna...

Sql injection

SQL injection vulnerability in the blogwriter module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter to index.php...

CVE-2008-2197

CVE-2008-2197 is a SQL injection in the Miniweb blogwriter module 2.0. The vulnerability exposes index.php via the historymonth parameter, enabling remote attackers to execute arbitrary SQL. The NVD record lists a CVSS v2 base score of 7.5 (HIGH) with network access, no authentication, and partia...