EUVD-2008-5790

Malware in sbrugna...

EUVD-2008-5789

Malware in sbrugna...

EUVD-2008-5788

Malware in sbrugna...

CVE-2008-5820

SQL injection vulnerability in eDNewsview.php in eDreamers eDNews 2 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

CVE-2008-5819

Directory traversal vulnerability in eDNewsarchive.php in eDreamers eDNews 2, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in eDNewsview.php in eDreamers eDNews 2 allows remote attackers to execute arbitrary SQL commands via the newsid parameter...

Directory traversal

Directory traversal vulnerability in eDNewsarchive.php in eDreamers eDNews 2, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...

Directory traversal

Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-5818

Directory traversal vulnerability in index.php in eDreamers eDContainer 2.22, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lg parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-5818

CVE-2008-5818 describes a directory traversal in the PHP file index.php of the eDreamers eDContainer 2.22 application. When magic_quotes_gpc is disabled, a remote attacker can cause arbitrary local file inclusion/execution by supplying a path traversal sequence via the lg parameter (e.g., ..). Th...

CVE-2008-5819

CVE-2008-5819 describes a directory traversal flaw in the eDreamers eDNews 2 package, specifically in the file eDNews_archive.php. The vulnerability occurs when magic_quotes_gpc is disabled and allows remote attackers to include and execute arbitrary local files by abusing a .. (dot dot) in the l...

CVE-2008-5820

CVE-2008-5820: SQL injection in eDNews_view.php of eDreamers eDNews 2 via the newsid parameter (unsanitized input) allows remote attackers to alter/execute arbitrary SQL. Affected software is eDNews_view.php in eDNews 2; root cause is improper input handling. CVSS shows high impact (partial confi...