EUVD-2007-1596

Malware in sbrugna...

CVE-2007-1602

The CVE-2007-1602 entry describes an SQL injection vulnerability in check_vote.php of Weekly Drawing Contest 0.0.1. The vulnerability allows remote attackers to craft a request using the order parameter to execute arbitrary SQL commands, potentially compromising data confidentiality and integrity...

CVE-2007-1601: Undefined Security Weakness

Directory traversal vulnerability in checkvote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to read arbitrary files via a .. dot dot in the order parameter. NOTE: another researcher disputes this vulnerability, noting that the order variable is not used in any context that allows...

CVE-2007-1602: Undefined Security Weakness

SQL injection vulnerability in checkvote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to execute arbitrary SQL commands via the order parameter...

wdc-lfi.txt

+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= Weekly Drawing Contest = checkvote.php Remote File Disclosure Vuln Script: Weekly Drawing Contest Version: 0.0.1 S!Te: http://www.hotscripts.com/jump.php?listingid=52638&jumptype=1 Discover: BorN To K!LL...

Weekly Drawing Contest <= (check_vote.php) Remote File Disclosure Vuln

+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= Weekly Drawing Contest = checkvote.php Remote File Disclosure Vuln Script: Weekly Drawing Contest Version: 0.0.1 S!Te: http://www.hotscripts.com/jump.php?listingid=52638&jumptype=1 Discover: BorN To K!LL...