EUVD-2007-6541

Malware in sbrugna...

Sql injection

SQL injection vulnerability in default.php in MMSLamp allows remote attackers to execute arbitrary SQL commands via the idpro parameter in a prodottidettaglio action...

CVE-2007-6575

CVE-2007-6575 covers an SQL injection in MMSLamp’s default.php, exploitable via the idpro parameter in a prodotti_dettaglio action. The vulnerability allows remote attackers to craft SQL commands that may affect the database; the NVD metrics indicate a high impact with network access, low attack ...