EUVD-2009-4954

Malware in sbrugna...

EUVD-2009-4955

Malware in sbrugna...

Sql injection

SQL injection vulnerability in paidbanner.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-4993

LM Starmail Paidmail 2.0 is affected by CVE-2009-4993, a PHP remote file inclusion (RFI) vulnerability in home.php that allows an attacker to execute arbitrary PHP code via a URL supplied to the page parameter. The OpenVAS entry corroborates an RFI issue (and also mentions SQLi/RFI in the same pr...

CVE-2009-4992

SQL injection vulnerability in paidbanner.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2009-4993

PHP remote file inclusion vulnerability in home.php in LM Starmail Paidmail 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

CVE-2009-4992

The dataset confirms a concrete SQL injection vulnerability in LM Starmail Paidmail 2.0, specifically in paidbanner.php where the vulnerable parameter is ID. The root cause is improper handling of user input enabling arbitrary SQL execution, with remote access and no authentication required impli...