EUVD-2009-1450

Malware in sbrugna...

CVE-2009-1452: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in theme/format.php in SMA-DB 0.3.13 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pagecss and 2 pagejavascript parameters. NOTE: the pagecontent vector is already is covered by CVE-2009-1450...

sma-db 0.3.12 - Remote File Inclusion Cross-Site Scripting

sma-db 0.3.12 - Remote File Inclusion Cross-Site Scripting -----------------:Remote File Include/cross site script:----------------- script:SMA-DB v0.3.12 ------------------------------------------------------------------ download from:http://bluevirus.ch/media/downloads/SMA-DBv0.3.12.zip...