EUVD-2006-3304

Malware in sbrugna...

CVE-2006-3307: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Project EROS bbsengine before bbsengine-20060429-1550-jam allow remote attackers to execute arbitrary SQL commands via 1 unspecified parameters in the php/comment.php and 2 the getpartialmatches method in php/aolbonics.php...