EUVD-2009-0411

Malware in sbrugna...

CVE-2009-0407

SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2009-0407

CVE-2009-0407 affects PHP-CMS Project 1 and is caused by an SQL injection in admin/login.php, exploitable through the username parameter to allow remote execution of arbitrary SQL commands. Connected sources corroborate this vulnerability description; no specific patch version or remediation deta...

CVE-2009-0407

SQL injection vulnerability in admin/login.php in PHP-CMS Project 1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

PHP-CMS Project login.php远程SQL注入漏洞

BUGTRAQ ID: 33473 PHP-CMS Project是一种基于Web的内容管理系统。 PHP-CMS Project的实现上存在输入验证漏洞，远程攻击者可能利用此漏洞控制服务器应用系统。 PHP-CMS Project的login.php脚本没有充分检查过滤用户提交的参数数据，攻击者者可以在输入中插入SQL语句获取对后台数据库的非授权操作。 PHP-CMS Project 1 厂商补丁： PHP-CMS Project --------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...