EUVD-2008-6197

Malware in sbrugna...

Sql injection

SQL injection vulnerability in buyerdetail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the 1 sid and 2 cid parameters...

CVE-2008-6227

SQL injection vulnerability in buyerdetail.php in Pre Multi-Vendor Shopping Malls allows remote attackers to execute arbitrary SQL commands via the 1 sid and 2 cid parameters...

CVE-2008-6227

The CVE-2008-6227 entry describes a SQL injection vulnerability in the buyer_detail.php component of a Pre Multi-Vendor Shopping Malls system. The vulnerability arises via the (1) sid and (2) cid parameters, allowing remote attackers to inject arbitrary SQL commands. The underlying root cause is ...