EUVD-2010-4159

Malware in sbrugna...

CVE-2010-4185

SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the NRGNSID cookie...

Sql injection

SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the NRGNSID cookie...

CVE-2010-4185

SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the NRGNSID cookie...

CVE-2010-4185

Energine 'NRGNSID' Cookie SQL Injection Vulnerability (CVE-2010-4185) affects index.php; the vulnerability allows remote attackers to inject SQL via the NRGNSID cookie, potentially affecting Energine versions 2.3.8 and earlier. The OpenVAS entry confirms SQLi in Energine and links to related advi...

PT-2010-5343

Name of the Vulnerable Software and Affected Versions Energine versions prior to 2.3.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the SQL injection vulnerability in the index.php file via the NRGNSID cookie. Recommendations For...

CVE-2010-4185: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the NRGNSID cookie...

Energine CMS - SQL Injection

Vulnerability ID: HTB22655 Reference: http://www.htbridge.ch/advisory/sqlinjectioninenergine.html Product: Energine Vendor: Energine http://energine.org/ Vulnerable Version: Vendor Notification: 13 October 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiting Vendor...