EUVD-2006-2068

Malware in sbrugna...

Sql injection

SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands via the ida parameter in a gallery fotoshow action...

CVE-2007-6467

SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands via the ida parameter in a gallery fotoshow action...

CVE-2007-6467

CVE-2007-6467 describes an SQL injection in MKPortal 1.1 RC1, specifically in index.php during the gallery foto_show action, exploitable via the ida parameter. The underlying issue is injectable SQL passed from user-controlled input, enabling remote attackers to execute arbitrary SQL commands. Th...

CVE-2007-6467

SQL injection vulnerability in index.php in MKPortal 1.1 RC1 allows remote attackers to execute arbitrary SQL commands via the ida parameter in a gallery fotoshow action...

CVE-2006-2067

The CVE-2006-2067 entry documents a SQL injection vulnerability in MKPortal 1.1 when used with vBulletin 3.5.4 and earlier. The flaw affects vb_board_functions.php, where the userid parameter can be exploited by remote attackers to execute arbitrary SQL commands. No specific exploit details are p...