EUVD-2005-4163

Malware in sbrugna...

EUVD-2005-4162

Malware in sbrugna...

CVE-2005-4169

CVE-2005-4169 affects eFiction 1.0 with multiple SQL injection vulnerabilities. Specifically, remote attackers can inject SQL through the let parameter in authors.php (viewlist action) and the sid parameter in viewstory.php. The issue is documented in NVD/NASL/Nessus entries among related vulnera...

CVE-2005-4169

Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 let parameter in a viewlist action to authors.php and 2 sid parameter to viewstory.php...

CVE-2005-4167

CVE-2005-4167 affects eFiction 1.0 and 1.1, where the let parameter in titles.php’s viewlist action is not sanitized, enabling stored or reflected XSS by remote attackers to inject arbitrary script/HTML. The vulnerability arises from unsanitized user input used to generate dynamic pages, allowing...