EUVD-2008-6455

Malware in sbrugna...

CVE-2008-6485: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in SoftComplex PHP Image Gallery allows remote attackers to execute arbitrary SQL commands via the ctg parameter...

CVE-2005-3844: Undefined Security Weakness

SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the 1 poll and 2 category parameters to index.php, and 3 the ctg parameter in an archive action...

CVE-2005-2622: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in ECW-Shop 6.0.2 allows remote attackers to inject arbitrary web script or HTML via the 1 max or 2 ctg parameter...