5 matches found
EUVD-2009-3223
Malware in sbrugna...
Sql injection
SQL injection vulnerability in the sections Section module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action...
CVE-2008-1462
SQL injection vulnerability in the sections Section module in RunCMS allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle action...
CVE-2008-1462
RunCMS is affected in the sections (Section) module where an SQL injection via the artid parameter in a viewarticle action allows remote attackers to execute arbitrary SQL commands. This is evidenced across multiple sources (NVD/NVD mirror and CVE records) describing a SQL injection vulnerability...
XOOPS WF-Section Module print.php articleid Parameter SQL Injection
The remote host is running the WF-Section module, a third-party module for XOOPS. The version of this module installed on the remote host fails to properly sanitize user-supplied input to the 'articleid' parameter of the 'modules/wfsection/print.php' script before using it to build a database...