6 matches found
EUVD-2010-5011
Malware in sbrugna...
CVE-2010-5047
SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
Sql injection
SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2010-5047
The CVE-2010-5047 entry concerns a SQL injection in the V-EVA Press Release Script’s page.php, exploitable via the id parameter. The root cause, affected component, and impact are described as remote SQL command execution opportunities. The available documents identify the vulnerable file (page.p...
PT-2011-1982
Name of the Vulnerable Software and Affected Versions V-EVA Press Release Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the page.php file. This can be exploited by sending malicious input to the API...
CVE-2010-5047: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL commands via the id parameter...