EUVD-2006-1236

Malware in sbrugna...

CVE-2006-1232

Multiple SQL injection vulnerabilities in DSDownload 1.0, with magicquotesgpc disabled, allow remote attackers to execute arbitrary SQL commands via the 1 key and 2 category parameters to a search.php and b downloads.php...

CVE-2006-1232

DSDownload 1.0 is affected by multiple SQL injection vulnerabilities. The issue arises in search.php and downloads.php where the parameters (1) key and (2) category are incorporated into SQL queries without proper sanitization, with magic_quotes_gpc disabled. This allows remote attackers to craft...