EUVD-2010-4575

Malware in sbrugna...

Sql injection

SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL commands via the nuser parameter in a registrate action...

PT-2010-5575

Name of the Vulnerable Software and Affected Versions Html-edit CMS version 3.1.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the nuser parameter in a "registrate" action. The endpoint involved is not explicitly specified, but it is relate...

CVE-2010-4609: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL commands via the nuser parameter in a registrate action...