EUVD-2008-5144

Malware in sbrugna...

CVE-2008-5166

CVE-2008-5166 is described across sources as a SQL injection vulnerability in the Riddles Website 1.2.1, exploitable via the riddleid parameter to run arbitrary SQL commands. The affected component is riddle.php; impact is remote code/data access with partial confidentiality/integrity/availabilit...