EUVD-2005-3947

Malware in sbrugna...

CVE-2005-3952

CVE-2005-3952 describes an SQL injection in PHP Labs Top Auction. The vulnerability affects the viewcat.php script and could allow remote attackers to modify or retrieve data via the (1) category, (2) type parameters, or (3) certain search parameters. The root cause is unsafely handled user input...

CVE-2005-3952

SQL injection vulnerability in PHP Labs Top Auction allows remote attackers to execute arbitrary SQL commands via the 1 category and 2 type parameters to viewcat.php, or 3 certain search parameters. NOTE: later a disclosure reported the affected version as 1.0...