EUVD-2014-2686

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in MobFox mAdserve 2.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 editadunit.php, 2 viewadunits.php, or 3 editcampaign.php in www/cp/...

CVE-2014-2654

MobFox mAdserve 2.0 and earlier is affected by CVE-2014-2654 due to insufficient sanitization of the id parameter in PHP scripts (edit_ad_unit.php, view_adunits.php, edit_campaign.php). The vulnerability allows a remote authenticated attacker to inject and execute arbitrary SQL commands against t...

CVE-2014-2654

Multiple SQL injection vulnerabilities in MobFox mAdserve 2.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 editadunit.php, 2 viewadunits.php, or 3 editcampaign.php in www/cp/...

PT-2014-4854

Name of the Vulnerable Software and Affected Versions MobFox mAdserve versions 2.0 and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the id parameter to specific API endpoints, including "edit ad unit.php", "view...

CVE-2014-2654: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MobFox mAdserve 2.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the id parameter to 1 editadunit.php, 2 viewadunits.php, or 3 editcampaign.php in www/cp/...

MobFox mAdserve SQL注入漏洞

Bugtraq ID:66661 MobFox mAdserve是一款基于WEB的广告服务应用。 MobFox mAdserve存在一个SQL注入漏洞，允许远程攻击者利用漏洞提交特制的SQL查询，操作或获取数据库数据。 0 MobFox mAdserve 2.0 目前没有详细解决方案： http://www.madserve.org/...