EUVD-2008-3547

Malware in sbrugna...

POWERGAP <= 2003 (s0x.php) Remote File Include Vulnerability

No description provided by source. ================================================================= powergap = s0x.php Remote File Inclusion Exploit ================================================================ Critical Level : Dangerous Venedor site : http://www.powergap-shop.de...

CVE-2008-3561: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in s03.php in Powergap Shopsystem, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the ag parameter...

powergapInclude.txt

================================================================= powergap = s0x.php Remote File Inclusion Exploit ================================================================ | Critical Level : Dangerous | | Venedor site : http://www.powergap-shop.de | | http://www.demo-shop.com | |...

CVE-2006-4236: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via a URL in the 1 shopid parameter to a s01.php, b s02.php, c s03.php, and d s04.php; and possibly a URL located after "shopid=" or "sid=" in the PATHINFO...