PT-2011-1748

Name of the Vulnerable Software and Affected Versions BaconMap version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the type parameter in the "doadd.php" file. Recommendations For BaconMap version 1.0, consider restricting access to the...

CVE-2010-4800

CVE-2010-4800 affects BaconMap 1.0 and is a SQL injection vulnerability in doadd.php via the type parameter. Public records (NVD/NVD mirror, OpenVAS) describe that remote attackers can execute arbitrary SQL commands, leading to data compromise. The OpenVAS entries additionally identify a broader ...

CVE-2010-4800: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in doadd.php in BaconMap 1.0 allows remote attackers to execute arbitrary SQL commands via the type parameter...