EUVD-2007-0684

Malware in sbrugna...

Sql injection

SQL injection vulnerability in i-search.php in Michelle's L2J Dropcalc 4 and earlier allows remote authenticated users to execute arbitrary SQL commands via the itemid parameter...

CVE-2007-0687

CVE-2007-0687 describes an SQL injection in i-search.php of Michelle's L2J Dropcalc 4 and earlier. The vulnerability allows remote authenticated users to inject arbitrary SQL via the itemid parameter, potentially impacting data confidentiality and integrity. Affected software: Michelle's L2J Drop...