EUVD-2008-1614

Malware in sbrugna...

Sql injection

SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter...

CVE-2008-1613

RedDot CMS (ioRD.asp) is vulnerable to a pre-authentication SQL injection via the LngId parameter. The issue, present in RedDot CMS 7.5 Build 7.5.0.48 and potentially in 6.5 and 7.0, arises from inadequate validation of LngId, allowing remote attackers to execute arbitrary SQL and enumerate datab...

CVE-2008-1613

SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter...