EUVD-2011-5122

Malware in sbrugna...

aero-net.com XSS vulnerability

Vulnerable URL: http://www.aero-net.com/index.php?rub=1"...

CVE-2011-5222: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in rub2w.php in PHP Flirt-Projekt 4.8 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the rub parameter...

PT-2012-2199

Name of the Vulnerable Software and Affected Versions PHP Flirt-Projekt versions 4.8 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the rub parameter in the rub2 w.php file. Recommendations For PHP Flirt-Projekt versions...

CVE-2006-1703: Undefined Security Weakness

PHP remote file inclusion vulnerability in lire.php in Sire 2.0 nws allows remote attackers to execute arbitrary PHP code via a URL in the rub parameter...

CVE-2006-1573: Undefined Security Weakness

PHP remote file inclusion vulnerability in index.php in MediaSlash Gallery allows remote attackers to execute arbitrary PHP code via a URL in the rub parameter part of the $pagemenu variable...