EUVD-2008-5789

Malware in sbrugna...

EUVD-2008-5790

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in eDNewsarchive.php in eDreamers eDNews 2, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-5820: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in eDNewsview.php in eDreamers eDNews 2 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2008-5819: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in eDNewsarchive.php in eDreamers eDNews 2, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...