EUVD-2012-4226

Malware in sbrugna...

Sql injection

SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-4282

SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2012-4282

CVE-2012-4282 corresponds to a SQL injection in Trombinoscope

Trombinoscope 3.5 SQL Injection

Exploit Title: Trombinoscope Bugs : ... 25 ... Exploit: http://localhost/script/photo.php?id=-9999//union//select//1,2,version-- Result : 5.0.51b-community-nt-log...