EUVD-2007-0134

Malware in sbrugna...

EUVD-2007-0137

Malware in sbrugna...

EUVD-2007-2709

Malware in sbrugna...

EUVD-2007-0136

Malware in sbrugna...

EUVD-2005-0538

Malware in sbrugna...

iGeneric iG Shop 1.x Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/12627/info iGeneric iG Shop is reportedly affected by multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using them in SQL queries...

IGeneric Free Shopping Cart 1.4 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9773/info It has been reported that iGeneric Free Shopping Cart is prone to a cross-site vulnerability. This issue is due to a failure of the application to properly sanitize user supplied URI parameters Exploitation coul...

CVE-2007-2717

SQL injection vulnerability in shop/page.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the typeid parameter, a different vector than CVE-2005-0537...

CVE-2007-2717

SQL injection vulnerability in shop/page.php of iGeneric (iG) Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the type_id[] parameter, a vector distinct from CVE-2005-0537. The description does not specify a patch or fixed version in the provided documents. References point...

CVE-2007-2717

SQL injection vulnerability in shop/page.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the typeid parameter, a different vector than CVE-2005-0537...

Sql injection

Multiple SQL injection vulnerabilities in displayreview.php in iGeneric iG Shop 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 userlogincookie parameter...

Sql injection

SQL injection vulnerability in compareproduct.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-0132

SQL injection vulnerability in compareproduct.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-0133

Multiple SQL injection vulnerabilities in displayreview.php in iGeneric iG Shop 1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id or 2 userlogincookie parameter...

CVE-2007-0134

Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is supplied to an eval function call in 1 cart.php and 2 page.php. NOTE: a later report and CVE analysis indicate that the vulnerability is present in 1...

Sql injection

SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-0130

CVE-2007-0130 describes a SQL injection in the web front-end of iGeneric iG Calendar 1.0, specifically in the file or function handling the id parameter of user.php. The vulnerability enables remote attackers to execute arbitrary SQL commands by supplying crafted input for id, leading to potentia...

CVE-2007-0130

SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-0134

Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the action parameter, which is supplied to an eval function call in 1 cart.php and 2 page.php. NOTE: a later report and CVE analysis indicate that the vulnerability is present in 1...

CVE-2007-0132

The CVE-2007-0132 entry concerns a SQL injection in the iGeneric iG Shop 1.4 application, specifically in compare_product.php. The underlying flaw allows an attacker to manipulate the id parameter to execute arbitrary SQL commands on the backend database. Affected component is the compare_product...