EUVD-2013-5151

Malware in sbrugna...

CVE-2013-5311: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to execute arbitrary SQL commands via the "n" parameter to 1 browsevideos.php or 2 members.php. NOTE: the cat parameter is already covered by CVE-2008-4157...

CVE-2013-5312: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Vastal I-Tech phpVID 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 n parameter to browsevideos.php or the 2 cat parameter to groups.php...

Unfixed XSS vulnerability at www.virtoon.mobi

Security researcher Camilo-TcK, has submitted on 07/10/2008 a cross-site-scripting XSS vulnerability affecting www.virtoon.mobi, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is currentl...