EV0105.txt

New eVuln Advisory: Skull-Splitter's PHP Downloadcounter for Wallpapers SQL Injection http://evuln.com/vulns/105/summary.html --------------------Summary---------------- eVuln ID: EV0105 CVE: CVE-2006-1328 Software: Skull-Splitter's PHP Downloadcounter for Wallpapers Sowtware's Web Site:...

CVE-2006-1328

SQL injection vulnerability in count.php in Skull-Splitter PHP Downloadcounter for Wallpapers 1.0 allows remote attackers to execute arbitrary SQL commands via the 1 countfieldname, 2 urlfieldname, or 3 url parameter...

CVE-2006-1328

The CVE concerns Skull-Splitter’s PHP Downloadcounter for Wallpapers 1.0. Vulnerable file: count.php; vulnerable parameters: count_fieldname, url_fieldname, and url. The underlying cause is unsanitized input used in SQL queries, enabling remote SQL injection. Exploitation details are supported by...