EUVD-2009-4342

Malware in sbrugna...

cpCommerce v1.2.8 - (id_document) Blind SQL Injection

Document Title: =============== cpCommerce v1.2.8 - iddocument Blind SQL Injection References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2254 Release Date: ============= 2020-05-08 Vulnerability Laboratory ID VL-ID: ==================================== 2254...

CVE-2009-4375: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in repository/repositoryattachment.php in AlienVault Open Source Security Information Management OSSIM 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to execute arbitrary SQL commands via the iddocument parameter...

CVE-2009-4374: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in repository/repositoryattachment.php in AlienVault Open Source Security Information Management OSSIM 2.1.5, and possibly other versions before 2.1.5-4, allows remote attackers to upload files into arbitrary directories via a .. dot dot in the iddocument paramet...

Sql injection

SQL injection vulnerability in document.php in cpCommerce 1.2.8 allows remote attackers to execute arbitrary SQL commands via the iddocument parameter...

CVE-2009-1345

The vulnerability CVE-2009-1345 affects cpCommerce 1.2.8, specifically the document.php component. It enables a SQL injection via the id_document parameter, allowing remote attackers to execute arbitrary SQL commands. Exploitation details or in-the-wild context are not provided in the connected d...

CVE-2009-1345: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in document.php in cpCommerce 1.2.8 allows remote attackers to execute arbitrary SQL commands via the iddocument parameter...