EUVD-2010-5021

Malware in sbrugna...

Sql injection

SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL commands via the tipodocid parameter...

CVE-2010-5057

SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL commands via the tipodocid parameter...

CVE-2010-5058

SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL commands via the resid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2010-5057

CVE-2010-5057 describes a SQL injection in the CMS Ariadna 1.1, specifically in the detResolucion.php script. The vulnerability is triggered via the tipodoc_id parameter, allowing remote attackers to execute arbitrary SQL commands. The available connected documents confirm the affected component ...

CVE-2010-5058

CVE-2010-5058 affects CMS Ariadna 1.1: the detResolucion.php script is vulnerable to SQL injection via the res_id parameter, allowing remote attackers to execute arbitrary SQL commands. The issue is documented across multiple sources (e.g., NVD/NVD mirrors) with a base score of 7.5 (HIGH) and net...

PT-2011-1993

Name of the Vulnerable Software and Affected Versions CMS Ariadna version 1.1 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved via the res id parameter in the detResolucion.php file. Recommendations For CMS Ariadna version 1.1...

PT-2011-1992

Name of the Vulnerable Software and Affected Versions CMS Ariadna version 1.1 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the tipodoc id parameter in the detResolucion.php file. Recommendations For CMS Ariadna version 1.1, avoi...

CVE-2010-5057: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL commands via the tipodocid parameter...

CVE-2010-5058: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL commands via the resid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CMS Ariadna 2009 SQL Injection

Exploit Title : CMS Ariadna 2009 SQLi Date : 2010-05-19 Author : Andrés Gómez Contact : [email protected] Dork : "allinurl: detResolucion.php?tipodocid=" Exploit in Perl Start In Next Line: use LWP::Simple; Malicious users may inject SQL querys into a vulnerable application to fool a user...