EUVD-2009-3303

Malware in sbrugna...

Sql injection

SQL injection vulnerability in SaphpLesson 4.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the CLIENTIP HTTP header...

CVE-2009-3321

CVE-2009-3321 affects SaphpLesson 4.3 with a SQL injection vulnerability exploitable when magic_quotes_gpc is disabled. An attacker can remotely send a crafted CLIENT_IP HTTP header to execute arbitrary SQL commands. The NVD lists a base score of 6.8 (Medium) with network access, no authenticatio...

CVE-2009-3321

SQL injection vulnerability in SaphpLesson 4.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the CLIENTIP HTTP header...