EUVD-2005-3304

Malware in sbrugna...

Sql injection

SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the dlid parameter...

CVE-2008-1646

SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the dlid parameter...

CVE-2008-1646: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the dlid parameter...

CVE-2005-3305: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via the 1 forumid or 2 threadid parameter in the Forum file, 3 the linkid in the Links file, 4 the artid parameter in the Sections file, and 5 the dlid parameter in the Download file...