EUVD-2006-6348

Malware in sbrugna...

CVE-2005-3976

SQL injection vulnerability in type.asp, as used in multiple DUware products including 1 DUamazon 3.1, 2 DUarticle 1.1, 3 DUclassified 4.2, 4 DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, 5 DUdownload 1.1, 6 DUgallery 3.3, 7 DUnews 1.1, and 8 DUpaypal 3.1 and DUpaypal Pro 3.0, allows remot...

CVE-2005-3976

SQL injection vulnerability in type.asp, as used in multiple DUware products including 1 DUamazon 3.1, 2 DUarticle 1.1, 3 DUclassified 4.2, 4 DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, 5 DUdownload 1.1, 6 DUgallery 3.3, 7 DUnews 1.1, and 8 DUpaypal 3.1 and DUpaypal Pro 3.0, allows remot...

CVE-2005-3976

CVE-2005-3976 describes a SQL injection in DUware products (DUamazon 3.1, DUarticle 1.1, DUclassified 4.2, DUdirectory 3.1/3.0, DUdownload 1.1, DUgallery 3.3, DUnews 1.1, DUpaypal 3.1/Pro 3.0) via the iType parameter in type.asp. The underlying issue is that user-supplied input is used to constru...