EUVD-2010-1625

Malware in sbrugna...

Sql injection

SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsp parameter...

CVE-2010-1599

SQL injection vulnerability in loadorder.php in NKInFoWeb 2.5 and 5.2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsp parameter...

CVE-2010-1599

The CVE-2010-1599 issue is a SQL injection in NKInFoWeb loadorder.php, affecting NKInFoWeb 2.5 and 5.2.2.0 via the id_sp parameter. Remote attackers could potentially execute arbitrary SQL commands through this parameter. The NVD entry lists a base score of 7.5 (High) with network attack vector a...