EUVD-2006-3024

Malware in sbrugna...

CVE-2006-3027

Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 CATID parameter in a subphotos.asp and b subLevel2.asp, the 2 ALID parameter in c photo.asp, and the 3 SUBID parameter in d subLevel2.asp...

CVE-2006-3027

CVE-2006-3027 involves Enthrallwebe ePhotos 2.2 and earlier with multiple SQL injection vulnerabilities. The issues arise from unsafely handling user-supplied parameters: CAT_ID (in subphotos.asp and subLevel2.asp), AL_ID (in photo.asp), and SUB_ID (in subLevel2.asp), enabling remote attackers to...

CVE-2006-3027

Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 CATID parameter in a subphotos.asp and b subLevel2.asp, the 2 ALID parameter in c photo.asp, and the 3 SUBID parameter in d subLevel2.asp...