PT-2014-5566

Name of the Vulnerable Software and Affected Versions GeoCore MAX version 7.3.3 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cpassword or cusername parameter in the register.php file. Recommendations For GeoCore MAX version 7.3.3,...

CVE-2014-3871: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in register.php in Geodesic Solutions GeoCore MAX 7.3.3 formerly GeoClassifieds and GeoAuctions allow remote attackers to execute arbitrary SQL commands via the 1 cpassword or 2 cusername parameter. NOTE: the b parameter to index.php vector is already covere...