EUVD-2005-3875

Malware in sbrugna...

CVE-2005-3880

Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in users/comments.php, 2 categoryid and 3 id parameters in users/kb.php...

CVE-2005-3880

Omnistar KBase 4.0 and earlier contain SQL injection vulnerabilities in the web front end. Specifically, the parameters (1) article_id in users/comments.php, and (2) category_id and (3) id in users/kb.php allow remote attackers to modify the underlying SQL commands. This relates to the CVE-2005-3...

CVE-2005-3880

Multiple SQL injection vulnerabilities in Omnistar KBase 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in users/comments.php, 2 categoryid and 3 id parameters in users/kb.php...

Omnistar KBase SQL inj, vuln.

Omnistar KBase SQL inj, vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/omnistar-kbase-sql-inj-vuln.html Vendor:http://www.omnistarkbase.com/ affected version:4.0 and prior Product Description: Omnistar KBase is a dynamic knowledgebase...