EUVD-2008-6720

Malware in sbrugna...

CVE-2024-29968 SQL Table names, column names, and SQL queries are collected in DR standby Supportsave

An information disclosure vulnerability exists in Brocade SANnav before v2.3.1 and v2.3.0a when Brocade SANnav instances are configured in disaster recovery mode. SQL Table names, column names, and SQL queries are collected in DR standby Supportsave. This could allow authenticated users to access...

Code injection

ViArt Shop aka Shopping Cart 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add and save action for a shopping cart in cartsave.php, which reveals the SQL table names in an error message, related to code that mishandles the lack of a userid parameter...