EUVD-2008-4885

Malware in sbrugna...

Shop7z v2.9 News.asp 文件 l_id 参数 SQL注入漏洞

No description provided by source...

shop7z某版本一枚SQL注入

简要描述： 这是补充的，，， 详细说明： 这是补充的，，， shop7z某版本一枚SQL注入（demo测试） 版本：Shop7z网上购物系统V3.7 http://down.chinaz.com/soft/35103.htm SQL注入漏洞文件：showone.asp 注入参数：lid= demo测试：http://www.shop7z.com/demo/showone.asp?lid=44 漏洞证明： 可搜索到案例： http://www.hpego.com/showone.asp?lid=41 http://www.kcp88.com/showone.asp?lid=55...

CVE-2008-4906: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in lyricssong.php in the Lyrics lyricsmenu plugin 0.42 for e107 allows remote attackers to execute arbitrary SQL commands via the lid parameter. NOTE: some of these details are obtained from third party information...