EUVD-2012-6376

Malware in sbrugna...

Sql injection

SQL injection vulnerability in showcode.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the codeid parameter...

CVE-2012-6526

The CVE applies to Vastal I-Tech Freelance Zone, specifically the show_code.php component. The root cause is a SQL injection in the code_id parameter that allows remote attackers to execute arbitrary SQL commands. In the provided sources, vulnerability details indicate that an attacker can exploi...

Freelance Zone - 'show_code.php' SQL Injection

source: https://www.securityfocus.com/bid/51533/info Freelance Zone is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modif...