EUVD-2010-2471

Malware in sbrugna...

CVE-2010-2462

SQL injection vulnerability in withdrawmoney.php in Toma Cero OroHYIP allows remote attackers to execute arbitrary SQL commands via the id parameter in a cancel action...

CVE-2010-2462

CVE-2010-2462 describes a SQL injection in withdraw_money.php of the OroHYIP project from Toma Cero, exploitable by remote attackers via the id parameter in a cancel action to run arbitrary SQL commands. Public references (NVD entry and mirrored records) confirm the vulnerability and impact as ar...