EUVD-2008-5144

Malware in sbrugna...

EUVD-2009-2881

Malware in sbrugna...

EUVD-2009-2880

Malware in sbrugna...

What am I? - Little Riddles - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application What am I? - Little Riddles published at the 'play' market has multiple vulnerabilities...

Da Vinci Riddles: Mystery - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Da Vinci Riddles: Mystery published at the 'play' market has multiple vulnerabilities...

Riddles with answers - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Riddles with answers published at the 'play' market has multiple vulnerabilities...

Smart Riddles - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Smart Riddles published at the 'play' market has multiple vulnerabilities...

Riddles. Just riddles. - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Riddles. Just riddles. published at the 'play' market has multiple vulnerabilities...

CVE-2009-2890

Cross-site scripting XSS vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...

CVE-2009-2891

CVE-2009-2891 describes an SQL injection in list.php of PHP Scripts Now Riddles, exploitable via the catid parameter. The underlying issue is improper handling of user-supplied input, enabling remote attackers to execute arbitrary SQL commands. Affected component: list.php within the PHP Scripts ...

CVE-2009-2890

Cross-site scripting XSS vulnerability in results.php in PHP Scripts Now Riddles allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...

CVE-2009-2890

CVE-2009-2890 affects the web app PHP Scripts Now Riddles, with a vulnerability in results.php where the searchquery parameter allows remote injection of arbitrary web script or HTML (reflected XSS). Root cause: lack of proper input sanitization on the searchquery parameter. Impact: enables injec...

PHP Scripts Now Riddles - riddleslist.php?catid SQL Injection

PHP Scripts Now Riddles - riddleslist.php?catid SQL Injection source: https://www.securityfocus.com/bid/44309/info PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting...

PHP Scripts Now Riddles - '/riddles/list.php?catid' SQL Injection

source: https://www.securityfocus.com/bid/44309/info PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

PHP Scripts Now Riddles - riddlesresults.php?searchQuery Cross-Site Scripting

PHP Scripts Now Riddles - riddlesresults.php?searchQuery Cross-Site Scripting source: https://www.securityfocus.com/bid/44309/info PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied...

PHP Scripts Now Riddles - '/riddles/results.php?searchQuery' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44309/info PHP Scripts Now Riddles is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

CVE-2008-5166

SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL commands via the riddleid parameter...

Sql injection

SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL commands via the riddleid parameter...

CVE-2008-5166

CVE-2008-5166 is described across sources as a SQL injection vulnerability in the Riddles Website 1.2.1, exploitable via the riddleid parameter to run arbitrary SQL commands. The affected component is riddle.php; impact is remote code/data access with partial confidentiality/integrity/availabilit...

CVE-2008-5166

SQL injection vulnerability in riddle.php in Riddles Website 1.2.1 allows remote attackers to execute arbitrary SQL commands via the riddleid parameter...