EUVD-2010-1398

Malware in sbrugna...

CVE-2010-1370: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detailad.asp in Pre Classified Listings ASP allows remote attackers to execute arbitrary SQL commands via the siteid parameter...

CVE-2008-6887

CVE-2008-6887: A SQL injection vulnerability affects the application Pre Classified Listings 1.0, specifically the detailad.asp component via the siteid parameter. Root cause is an unsafely constructed database query allowing arbitrary SQL commands. Impact is described as partial confidentiality,...

CVE-2008-6887: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detailad.asp in Pre Classified Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the siteid parameter...