EUVD-2016-1560

Malware in sbrugna...

Sql injection

e107 2.1.1 allows SQL injection by remote authenticated administrators via the pagelist parameter to e107admin/menus.php, related to the menuSaveVisibility function...

tandiscms-sql.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Tandis CMS This System Protected By NNET SECURITY !"; 297 exit; 298 299 $pagecontent = array; 300 $result = mysqlquery"SELECT ".$tandisversion."tblnews.,".$tandisversion."contents.content as cnt FROM...