4 matches found
EUVD-2010-1610
Malware in sbrugna...
CVE-2010-1583
SQL injection vulnerability in the loadByKey function in the TznDbConnection class in tznmysql.php in Tirzen aka TZN Framework 1.5, as used in TaskFreak! before 0.6.3, allows remote attackers to execute arbitrary SQL commands via the username field in a login action...
CVE-2010-1583
SQL injection vulnerability in the loadByKey function in the TznDbConnection class in tznmysql.php in Tirzen aka TZN Framework 1.5, as used in TaskFreak! before 0.6.3, allows remote attackers to execute arbitrary SQL commands via the username field in a login action...
TaskFreak! loadByKey() SQL Injection
The version of TaskFreak installed on the remote host includes a version of the Tirzen Framework that fails to sanitize input to the 'loadByKey' function in the TznDbConnection class before using it in database queries. An unauthenticated, remote attacker can leverage this issue to launch a SQL...