EUVD-2008-3353

Malware in sbrugna...

Sql injection

SQL injection vulnerability in story.php in Pligg CMS Beta 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: this might overlap CVE-2008-1774...

CVE-2008-1774

CVE-2008-1774 describes an SQL injection vulnerability in editlink.php of Pligg 9.9.0, allowing remote attackers to execute arbitrary SQL commands through the id parameter. This vulnerability is documented across multiple sources (NVD listing and related CVE entries) as enabling arbitrary SQL exe...