EUVD-2017-7392

Malware in sbrugna...

Sql injection

ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604...

CVE-2008-3604

The vulnerability is CVE-2008-3604: an SQL injection in ZeeBuddy 2.1’s bannerclick.php, exploitable via the adid parameter. This is a parameter-based injection that could allow remote attackers to execute arbitrary SQL commands. Public metrics indicate a high/critical impact profile (CVSS v2 base...

CVE-2008-3604

SQL injection vulnerability in bannerclick.php in ZeeBuddy 2.1 allows remote attackers to execute arbitrary SQL commands via the adid parameter...