EUVD-2010-1299

Malware in sbrugna...

EUVD-2010-1298

Malware in sbrugna...

CVE-2010-1854

Cross-site scripting XSS vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to inject arbitrary web script or HTML via the idauk parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; th...

CVE-2010-1855

SQL injection vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to execute arbitrary SQL commands via the idauk parameter...

CVE-2010-1855: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to execute arbitrary SQL commands via the idauk parameter...

CVE-2010-1854: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in auktion.php in Pay Per Watch & Bid Auktions System allows remote attackers to inject arbitrary web script or HTML via the idauk parameter, which is not properly handled in a forced SQL error message. NOTE: the provenance of this information is unknown; th...

Sql injection

SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers to execute arbitrary SQL commands via the idauk parameter...

Sql injection

SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the idauk parameter...

CVE-2010-1269

CVE-2010-1269 : SQL injection in auktion.php of phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers to execute arbitrary SQL via the id_auk parameter. Impact: partial confidentiality/integrity/availability. CVSS v2 base score 7.5. No remediation details provided in the supp...

CVE-2010-1270

SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the idauk parameter...

CVE-2010-1269: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in auktion.php in phpscripte24 Niedrig Gebote Pro Auktions System II allows remote attackers to execute arbitrary SQL commands via the idauk parameter...

CVE-2010-1270: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in auktion.php in Multi Auktions Komplett System 2 allows remote attackers to execute arbitrary SQL commands via the idauk parameter...

Multi Auktions Komplett System 2 Blind SQL Injection

----------------------------Information------------------------------------------------ +Name : Multi Auktions Komplett System V2 1 ----------------------------------------------------------------------------------------- Exp...