EUVD-2008-5977

Malware in sbrugna...

EUVD-2008-4723

Malware in sbrugna...

CVE-2008-6007

SQL injection vulnerability in viewgroup.php in QuidaScript BookMarks Favourites Script APB allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in viewgroup.php in QuidaScript BookMarks Favourites Script APB allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6007

SQL injection vulnerability in viewgroup.php in QuidaScript BookMarks Favourites Script APB allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6007

CVE-2008-6007 describes an SQL injection in QuidaScript BookMarks Favourites Script (APB) where the vulnerability exists in view_group.php and is exploitable via the id parameter. The root cause is unsanitized input leading to arbitrary SQL execution, with potential impact including data access o...

Sql injection

SQL injection vulnerability in index.php in QuidaScript FAQ Management Script allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-4743

SQL injection vulnerability in index.php in QuidaScript FAQ Management Script allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-4743

CVE-2008-4743 is an SQL injection vulnerability in QuidaScript’s FAQ Management Script, specifically in index.php where the catid parameter is used unsafely. The affected component is the index.php handler within the QuidaScript FAQ Management Script, with the underlying cause being improper hand...

BookMarks Favourites Script (view_group.php id) SQL Injection Vuln

No description provided by source. || | | BookMarks Favourites Script viewgroup.php id Remote SQL Injection Vulnerability | | |-------------------- Hussin X -------------------| | | Author: Hussin X | | Home : IQ-SecuritY WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | script :...

faq-sql.txt

|| | | FAQ Management catid Remote SQL Injection Vulnerability | | |--------------------Ana TrYaG I-------------------| | | Author: Hussin X | | Home : WwW.IQ-ty.CoM | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

BookMarks Favourites Script (view_group.php id) SQL Injection Vuln

Exploit for unknown platform in category web applications ================================================================== BookMarks Favourites Script viewgroup.php id SQL Injection Vuln ================================================================== || | | BookMarks Favourites Script...

QuidaScript FAQ Management Script 'catid' SQL注入漏洞

BUGTRAQ ID: 30775 CNCAN ID：CNCAN-2008082208 QuidaScript FAQ Management Script是一款基于PHP的WEB应用程序。 QuidaScript FAQ Management Script不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或操作数据库。 问题是脚本对用户提交的'catid'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 QuidaScript FAQ Management Script 目前没有解决方案提供：...