EUVD-2005-3830

Malware in sbrugna...

EUVD-2005-3831

Malware in sbrugna...

CVE-2005-3836

SQL injection vulnerability in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the announce parameter...

CVE-2005-3835

PHP remote file inclusion vulnerability in support/index.php in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the main parameter...

CVE-2005-3835

The CVE-2005-3835 entry documents a PHP remote file inclusion vulnerability in DeskLance 2.3 and earlier, exploitable through a URL parameter (main) in support/index.php to execute arbitrary PHP code. Affected software: DeskLance (desktop/web app)

CVE-2005-3835

PHP remote file inclusion vulnerability in support/index.php in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the main parameter...

CVE-2005-3836

CVE-2005-3836 affects DeskLance 2.3 and earlier. The issue is a SQL injection through the announce parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD CVSS v2 base score is 7.5 (HIGH) with network vectors, low attack complexity, no authentication required, and partial ...

CVE-2005-3836

SQL injection vulnerability in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the announce parameter...

DeskLance Vuln.

DeskLance Vuln. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/desklance-vuln.html Vendor:http://www.desklance.com/ affected version: 2.3 and prior Vuln. description: Input passed to the "main" parameter in "index.php" isn't properly verified,...