EUVD-2009-3939

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the 1 userid parameter to feedback.php, 2 cateid parameter to category.php, 3 id parameter to news.php, and 4 productid parameter to itechd.php. NOTE: the sellersothersitem.php,...

CVE-2009-3968

CVE-2009-3968 describes multiple SQL injection vulnerabilities in ITechBids 8.0. The issues allow remote attackers to execute arbitrary SQL commands via (1) user_id in feedback.php, (2) cate_id in category.php, (3) id in news.php, and (4) productid in itechd.php. The note mentions that vectors in...

ITechBids 8.0 (itechd.php productid) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ ITechBids 8.0 itechd.php productid Blind SQL Injection Exploit ================================================================ !/usr/bin/perl use LWP::UserAgent; use...