EUVD-2008-0818

Malware in sbrugna...

CVE-2008-0811: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in AuraCMS 1.62 allow remote attackers to execute arbitrary SQL commands via 1 the kid parameter to a mod/dl.php or b mod/links.php, and 2 the query parameter to search.php...