EUVD-2009-0113

Malware in sbrugna...

CVE-2009-0104

SQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute arbitrary SQL commands via the qType parameter in a webboard prog action...

Sql injection

SQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute arbitrary SQL commands via the qType parameter in a webboard prog action...

CVE-2009-0104

SQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute arbitrary SQL commands via the qType parameter in a webboard prog action...

CVE-2009-0104

CVE-2009-0104 affects EZpack 4.2b2, with a vulnerability in the index.php webboard action that allows SQL injection via the qType parameter. The underlying issue is in the handling of the qType input, enabling an attacker to run arbitrary SQL commands remotely. Documents consistently identify the...

CVE-2009-0104: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in EZpack 4.2b2 allows remote attackers to execute arbitrary SQL commands via the qType parameter in a webboard prog action...

CVE-2009-0105: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in EZpack 4.2b2 allows remote attackers to inject arbitrary web script or HTML via the mdfd parameter in a prog action...