EUVD-2006-2302

Malware in sbrugna...

Sql injection

SQL injection vulnerability in admindefault.asp in OzzyWork Galeri allows remote attackers to execute arbitrary SQL commands via the 1 Login or 2 password fields...

CVE-2006-2301

SQL injection vulnerability in admindefault.asp in OzzyWork Galeri allows remote attackers to execute arbitrary SQL commands via the 1 Login or 2 password fields...

CVE-2006-2301

The CVE-2006-2301 entry concerns a SQL injection vulnerability in OzzyWork Galeri’s admin_default.asp, exploitable via the (1) Login or (2) password fields. The underlying flaw is unsafely constructed SQL queries that allow remote attackers to inject arbitrary SQL commands. Related records confir...

CVE-2006-2301

SQL injection vulnerability in admindefault.asp in OzzyWork Galeri allows remote attackers to execute arbitrary SQL commands via the 1 Login or 2 password fields...