EUVD-2009-4688

Malware in sbrugna...

CVE-2009-4724

CVE-2009-4724 describes an SQL injection in shop.htm of the PPScript (PaymentProcessorScript.net). The vulnerability arises from unsafely handling the cid parameter, enabling remote attackers to execute arbitrary SQL commands. Affected component is the PPScript web interface (shop.htm); root caus...

PaymentProcessorScript SQL Injection

/ PaymentProcessorScript cid Remote SQL Injection Vulnerability Discovered by : MizoZ Contact : [email protected] Team : EvilWay Date : July 29 2009 Greetings : Moudi , Zuka, All friends / SQL Injection shop.php GET : cid : HOST/PATH/shop.php?cid=SQL CODE SQL CODE : -1+union+select+1,2,version-- Ex :...