EUVD-2010-0999

Malware in sbrugna...

EUVD-2010-1000

Malware in sbrugna...

EUVD-2010-2328

Malware in sbrugna...

EUVD-2009-4833

Malware in sbrugna...

CVE-2010-2318

Cross-site scripting XSS vulnerability in cmsdata.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2010-2318

Cross-site scripting XSS vulnerability in cmsdata.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2010-2318

Cross-site scripting XSS vulnerability in cmsdata.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2010-2318

PHPCityPortal 1.3 has a Cross-site scripting (XSS) vulnerability in cms_data.php, exploitable via the page parameter to inject arbitrary script/HTML. This is caused by unsanitized input passed to the page parameter, enabling remote attackers to execute embedded scripts in the victim’s browser. Mu...

CVE-2010-2318: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cmsdata.php in PHPCityPortal 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2009-4870

Multiple SQL injection vulnerabilities in login.php in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the 1 requsername aka Username and 2 reqpassword aka Password parameters. NOTE: some of these details are obtained from third party information...

CVE-2009-4870

Multiple SQL injection vulnerabilities in login.php in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the 1 requsername aka Username and 2 reqpassword aka Password parameters. NOTE: some of these details are obtained from third party information...

CVE-2009-4870

CVE-2009-4870 affects PHPCityPortal's login.php; SQL injection via the req_username and req_password parameters allows remote execution of arbitrary SQL commands. Underlying issue is improper input handling in the login logic. CVSS indicates a HIGH impact with partial confidentiality, integrity, ...

CVE-2009-4870: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in login.php in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the 1 requsername aka Username and 2 reqpassword aka Password parameters. NOTE: some of these details are obtained from third party information...

Sql injection

Multiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 videoshow.php, 2 spotlightdetail.php, 3 realestatedetails.php, and 4 autodetails.php...

CVE-2010-0975

PHP remote file inclusion vulnerability in external.php in PHPCityPortal allows remote attackers to execute arbitrary PHP code via a URL in the url parameter...

CVE-2010-0974

Multiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 videoshow.php, 2 spotlightdetail.php, 3 realestatedetails.php, and 4 autodetails.php...

CVE-2010-0974

Multiple SQL injection vulnerabilities in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 videoshow.php, 2 spotlightdetail.php, 3 realestatedetails.php, and 4 autodetails.php...

CVE-2010-0975

PHP remote file inclusion vulnerability in external.php in PHPCityPortal allows remote attackers to execute arbitrary PHP code via a URL in the url parameter...

CVE-2010-0974

PHPCityPortal is affected by CVE-2010-0974 due to multiple SQL injection vulnerabilities. The issue allows remote attackers to inject arbitrary SQL via the id parameter to four pages: video_show.php, spotlight_detail.php, real_estate_details.php, and auto_details.php. Root cause is improper handl...

CVE-2010-0975

CVE-2010-0975 describes a PHP remote file inclusion vulnerability in the PHPCityPortal project, specifically in the file external.php where an attacker can supply a URL in the url parameter to include and execute remote PHP code. The issue is actionable remotely over the network with low complexi...