EUVD-2007-6047

Malware in sbrugna...

SkyPortal contains multiple SQL injection vulnerabilities

Overview SkyPortal RC6 contains multiple SQL injection vulnerabilities which could allow a remote, unauthenticated attacker to gain access to the back-end database and to add, modify or remove data. Description SkyPortal is a modular web portal and online community system that includes web-based...

Sql injection

Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 nctop.asp; 2 incbookmarks.asp, possibly involving a parameter passed from cpmain.asp; 3 incprofilefunctions.asp; or 4 incSUBSCRIPTIONS.asp; or the 5...

CVE-2007-6078

Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 nctop.asp; 2 incbookmarks.asp, possibly involving a parameter passed from cpmain.asp; 3 incprofilefunctions.asp; or 4 incSUBSCRIPTIONS.asp; or the 5...

CVE-2007-6078

SkyPortal RC6 contains multiple SQL injection vulnerabilities that could allow a remote, unauthenticated attacker to gain access to the back-end database and add, modify, or remove data by exploiting vulnerable endpoints such as nc_top.asp, inc_bookmarks.asp, inc_profile_functions.asp, inc_SUBSCR...

CVE-2007-6078

Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 nctop.asp; 2 incbookmarks.asp, possibly involving a parameter passed from cpmain.asp; 3 incprofilefunctions.asp; or 4 incSUBSCRIPTIONS.asp; or the 5...