EUVD-2006-2984

Malware in sbrugna...

CVE-2006-2987

Multiple SQL injection vulnerabilities in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 voteid, and 3 vfiel parameters to a index.php, and via the 4 nick, 5 email, 6 city, 7 messen, and 8 message form field parameters to b...

CVE-2006-2987

CVE-2006-2987 affects Dominios Europa PICRATE (aka TAL RateMyPic) 1.0. The vulnerability is a set of SQL injection flaws in which arbitrary SQL commands can be injected via parameters to index.php (id, voteid, vfiel) and add.php (nick, email, city, messen, message). The root cause is improper han...

CVE-2006-2987

Multiple SQL injection vulnerabilities in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 voteid, and 3 vfiel parameters to a index.php, and via the 4 nick, 5 email, 6 city, 7 messen, and 8 message form field parameters to b...

CVE-2006-2987: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 voteid, and 3 vfiel parameters to a index.php, and via the 4 nick, 5 email, 6 city, 7 messen, and 8 message form field parameters to b...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the 1 name aka nick, 2 email, and 3 comment boxes; and via t...

CVE-2006-2812

Multiple cross-site scripting XSS vulnerabilities in index.php in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the 1 name aka nick, 2 email, and 3 comment boxes; and via t...

CVE-2006-2812

Multiple cross-site scripting XSS vulnerabilities in index.php in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the 1 name aka nick, 2 email, and 3 comment boxes; and via t...

CVE-2006-2812

CVE-2006-2812 affects Dominios Europa PICRATE (aka TAL RateMyPic) 1.0. Multiple XSS flaws exist in index.php allowing remote attackers to inject arbitrary script/HTML via a javascript: URI in the SRC attribute of an IMG element (in name/nick, email, and comment fields) and via the id parameter. R...

CVE-2006-2812: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in index.php in Dominios Europa PICRATE aka TAL RateMyPic 1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the 1 name aka nick, 2 email, and 3 comment boxes; and via t...