EUVD-2009-4954

Malware in sbrugna...

EUVD-2009-4955

Malware in sbrugna...

LM Starmail Paidmail SQLi and RFI Vulnerabilities

LM Starmail Paidmail is prone to SQL injection SQLi and remote file inclusion RFI vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2009-4993

PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

Sql injection

SQL injection vulnerability in paidbanner.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-4992

SQL injection vulnerability in paidbanner.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2009-4993

LM Starmail Paidmail 2.0 is affected by CVE-2009-4993, a PHP remote file inclusion (RFI) vulnerability in home.php that allows an attacker to execute arbitrary PHP code via a URL supplied to the page parameter. The OpenVAS entry corroborates an RFI issue (and also mentions SQLi/RFI in the same pr...

CVE-2009-4992

The dataset confirms a concrete SQL injection vulnerability in LM Starmail Paidmail 2.0, specifically in paidbanner.php where the vulnerable parameter is ID. The root cause is improper handling of user input enabling arbitrary SQL execution, with remote access and no authentication required impli...

CVE-2009-4993

PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-4993: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-4992: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in paidbanner.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...