EUVD-2007-6340

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in GestDown 1.00 Beta allow remote attackers to execute arbitrary SQL commands via the 1 categorie parameter to catdownload.php, or the id parameter to 2 download.php or 3 hitcounter.php...

CVE-2007-6373

Multiple SQL injection vulnerabilities in GestDown 1.00 Beta allow remote attackers to execute arbitrary SQL commands via the 1 categorie parameter to catdownload.php, or the id parameter to 2 download.php or 3 hitcounter.php...

CVE-2007-6373

GestDown 1.00 Beta is affected by multiple SQL injection vulnerabilities in PHP scripts: catdownload.php (parameter “categorie”), download.php and hitcounter.php (parameter “id”). The underlying issue is unsafely interpolating user input into SQL, allowing remote attackers to execute arbitrary SQ...

CVE-2007-6373

Multiple SQL injection vulnerabilities in GestDown 1.00 Beta allow remote attackers to execute arbitrary SQL commands via the 1 categorie parameter to catdownload.php, or the id parameter to 2 download.php or 3 hitcounter.php...