EUVD-2008-3567

Malware in sbrugna...

EUVD-2008-3566

Malware in sbrugna...

Sql injection

Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to visit.php, or the PATHINFO to the default URI under 2 report/, 3 addreview/, or 4 refer/...

CVE-2008-3580

Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to visit.php, or the PATHINFO to the default URI under 2 report/, 3 addreview/, or 4 refer/...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Qsoft K-Links allows remote attackers to inject arbitrary web script or HTML via the loginmessage parameter in a login action...

CVE-2008-3581

Cross-site scripting XSS vulnerability in index.php in Qsoft K-Links allows remote attackers to inject arbitrary web script or HTML via the loginmessage parameter in a login action...

CVE-2008-3580

CVE-2008-3580 affects Qsoft K-Links, with multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL via (1) the id parameter to visit.php, or (2) the PATH_INFO to the default URI under report/, addreview/, or refer/. The connected records confirm the affected produ...

CVE-2008-3581

CVE-2008-3581 is a documented cross-site scripting (XSS) vulnerability in the Qsoft K-Links product, specifically in the index.php login action. The login_message parameter is the input vector used to inject arbitrary script/HTML. The NVD entry lists a base score of 4.3 (Medium) with no confident...

CVE-2008-3580

Multiple SQL injection vulnerabilities in Qsoft K-Links allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to visit.php, or the PATHINFO to the default URI under 2 report/, 3 addreview/, or 4 refer/...

CVE-2008-3581

Cross-site scripting XSS vulnerability in index.php in Qsoft K-Links allows remote attackers to inject arbitrary web script or HTML via the loginmessage parameter in a login action...