EUVD-2009-0672

Malware in sbrugna...

EUVD-2009-0677

Malware in sbrugna...

EUVD-2009-0674

Malware in sbrugna...

EUVD-2009-0673

Malware in sbrugna...

CVE-2009-0672

SQL injection vulnerability in the ResendEmail module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary SQL commands via the userprefix parameter to modules.php...

Sql injection

SQL injection vulnerability in the ResendEmail module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary SQL commands via the userprefix parameter to modules.php...

Code injection

images/captcha.php in Raven Web Services RavenNuke 2.30, when registerglobals and displayerrors are enabled, allows remote attackers to determine the existence of local files by sending requests with full pathnames in the aFonts array parameter, and then observing the error messages, which differ...

Code injection

avatarlist.php in the Your Account module, reached through modules.php, in Raven Web Services RavenNuke 2.30 allows remote authenticated users to execute arbitrary code via PHP sequences in an element of the replacements array, which is processed by the pregreplace function with the eval switch, ...

CVE-2009-0674

images/captcha.php in Raven Web Services RavenNuke 2.30, when registerglobals and displayerrors are enabled, allows remote attackers to determine the existence of local files by sending requests with full pathnames in the aFonts array parameter, and then observing the error messages, which differ...

CVE-2009-0674

CVE-2009-0674 affects RavenNuke 2.30 (Raven Web Services). The vulnerability arises when register_globals and display_errors are enabled, allowing remote attackers to probe local file existence by sending requests with full paths in the aFonts array parameter and observing differing error message...