EUVD-2015-5599

Malware in sbrugna...

phpRechnung SQL Injection Vulnerability

phpRechnung is a web-based accounting software. A SQL injection vulnerability exists in the list.php script in versions prior to phpRechnung 1.6.5. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

CVE-2015-5648

SQL injection vulnerability in list.php in phpRechnung before 1.6.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in list.php in phpRechnung before 1.6.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-5648

SQL injection vulnerability in list.php in phpRechnung before 1.6.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-5648

CVE-2015-5648 concerns phpRechnung where the vulnerable component is the list.php script. The affected product is phpRechnung, version prior to 1.6.5. The root cause is an SQL injection (CWE-89) in list.php that allows a remote authenticated user to execute arbitrary SQL commands via unspecified ...

CVE-2015-5648: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in list.php in phpRechnung before 1.6.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

phpRechnung vulnerable to SQL injection

Overview phpRechnung is a web-based accounting software. list.php of phpRechnung contains an SQL injection CWE-89 vulnerability. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An authenticated...

JVN#02671769: phpRechnung vulnerable to SQL injection

phpRechnung is a web-based accounting software. list.php of phpRechnung contains an SQL injection CWE-89 vulnerability. Impact An authenticated attacker may obtain or alter information stored in the database. Solution Update the Software Update to the latest version according to the information...