EUVD-2009-0292

Malware in sbrugna...

Sql injection

SQL injection vulnerability in lib/patUser.php in KEEP Toolkit before 2.5.1 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password...

CVE-2009-0287

SQL injection vulnerability in lib/patUser.php in KEEP Toolkit before 2.5.1 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password...

CVE-2009-0287

The vulnerability CVE-2009-0287 affects KEEP Toolkit prior to 2.5.1, exposed via lib/patUser.php. It allows remote attackers to inject SQL through the username and password parameters, enabling arbitrary SQL commands. Impact per CVSS v2 (AV:N/AC:L/Au:N/C:P/I:P/A:P) is high (base score 7.5). Upgra...