EUVD-2002-2147

Malware in sbrugna...

EUVD-2002-2146

Malware in sbrugna...

CVE-2002-2168

SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs including functiondescribeitem1.inc.php...

CVE-2002-2167

Directory traversal vulnerability in functionfoot1.inc.php for Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to read arbitrary files via .. dot dot sequences terminated by a null character in the $designNo variable, which is part of an "include" function call...

CVE-2002-2168

CVE-2002-2168 describes a SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 . The vulnerability allows remote attackers to execute arbitrary SQL queries via various programs, including function_describe_item1.inc.php . The connected documents confirm the same description acros...

CVE-2002-2167

The CVE-2002-2167 issue affects Thorsten Korner’s 123tkShop prior to version 0.3.1. A directory traversal flaw exists in function_foot_1.inc.php: a crafted designNo value can terminate with a null character, enabling remote attackers to read arbitrary files via include() calls. Impact is read acc...

CVE-2002-2168

SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs including functiondescribeitem1.inc.php...

CVE-2002-2168: Undefined Security Weakness

SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs including functiondescribeitem1.inc.php...

CVE-2002-2168

SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs including functiondescribeitem1.inc.php...

CVE-2002-2167

Directory traversal vulnerability in functionfoot1.inc.php for Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to read arbitrary files via .. dot dot sequences terminated by a null character in the $designNo variable, which is part of an "include" function call...