EUVD-2008-4332

Malware in sbrugna...

EUVD-2008-4333

Malware in sbrugna...

phpsmartcom 0.2 (lfi/sql) Multiple Vulnerabilities

No description provided by source. fphpSmartCom v. 0.2 Local File Inclusion , SQL Injection Vuln Download : http://sourceforge.net/projects/phpsmartcom/ Local File Inclusion: http://127.0.0.1/phpsmartcom/index.php?p=../../../../../boot.ini%00 SQL Injection:...

CVE-2008-4351

Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitrary files via a .. dot dot in the p parameter...

CVE-2008-4352

SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a viewprofile action to index.php...

Sql injection

SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a viewprofile action to index.php...

Directory traversal

Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitrary files via a .. dot dot in the p parameter...

CVE-2008-4351

CVE-2008-4351 affects phpSmartCom 0.2, where index.php is vulnerable to directory traversal via a .. in the p parameter, allowing remote inclusion and execution of arbitrary files. Impact is reflected as partial confidentiality, integrity, and availability (CVSSv2 base 7.5, HIGH). Exploitation de...

CVE-2008-4352

SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a viewprofile action to index.php...

CVE-2008-4351

Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitrary files via a .. dot dot in the p parameter...

CVE-2008-4352

CVE-2008-4352 describes an SQL injection in phpSmartCom 0.2, exploitable via the uid parameter in the viewprofile action of inc/pages/viewprofile.php. The underlying issue is unsafely constructed SQL queries, allowing remote attackers to execute arbitrary SQL. Affected component: phpSmartCom 0.2,...

CVE-2008-4352: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a viewprofile action to index.php...

CVE-2008-4351: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in phpSmartCom 0.2 allows remote attackers to include and execute arbitrary files via a .. dot dot in the p parameter...

phpSmartCom 0.2 (LFI/SQL) Multiple Remote Vulnerabilities

No description provided by source. fphpSmartCom v. 0.2 Local File Inclusion , SQL Injection Vuln Download : http://sourceforge.net/projects/phpsmartcom/ Local File Inclusion: http://127.0.0.1/phpsmartcom/index.php?p=../../../../../boot.ini%00 SQL Injection:...

phpSmartCom 0.2 (LFI/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ========================================================= phpSmartCom 0.2 LFI/SQL Multiple Remote Vulnerabilities ========================================================= fphpSmartCom v. 0.2 Local File Inclusion , SQL Injection Vuln...

phpsmartcom 0.2 - Local File Inclusion SQL Injection

phpsmartcom 0.2 - Local File Inclusion SQL Injection fphpSmartCom v. 0.2 Local File Inclusion , SQL Injection Vuln Download : http://sourceforge.net/projects/phpsmartcom/ Local File Inclusion: http://127.0.0.1/phpsmartcom/index.php?p=../../../../../boot.ini%00 SQL Injection:...

phpsmartcom 0.2 - Local File Inclusion / SQL Injection

fphpSmartCom v. 0.2 Local File Inclusion , SQL Injection Vuln Download : http://sourceforge.net/projects/phpsmartcom/ Local File Inclusion: http://127.0.0.1/phpsmartcom/index.php?p=../../../../../boot.ini%00 SQL Injection:...