EUVD-2008-1361

Malware in sbrugna...

CVE-2008-1354

The CVE-2008-1354 issue concerns SQL injection in MyIssuesView.asp of Advanced Data Solutions Virtual Support Office-XP (VSO-XP). The vulnerable component is the MyIssuesView.asp page, with the root cause described as unsafe handling of the Issue_ID parameter allowing arbitrary SQL execution. The...