EUVD-2008-5144

Malware in sbrugna...

CVE-2008-5166

CVE-2008-5166 is described across sources as a SQL injection vulnerability in the Riddles Website 1.2.1, exploitable via the riddleid parameter to run arbitrary SQL commands. The affected component is riddle.php; impact is remote code/data access with partial confidentiality/integrity/availabilit...

CVE-2008-5166: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL commands via the riddleid parameter...