EUVD-2009-1656

Malware in sbrugna...

Sql injection

SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

CVE-2009-1661

CVE-2009-1661 affects uTopic 1.0: an SQL injection in the admin/utopic.php path when magic_quotes_gpc is disabled. The vulnerability allows remote attackers to inject SQL via the rating parameter to index.php, enabling arbitrary commands as described in the NVD entry. Connected documents corrobor...