EUVD-2006-1503

Malware in sbrugna...

[eVuln] vCounter - sourceworkshop SQL Injection Vulnerability

New eVuln Advisory: vCounter - sourceworkshop SQL Injection Vulnerability http://evuln.com/vulns/108/summary.html --------------------Summary---------------- eVuln ID: EV0108 CVE: CVE-2006-1499 Software: vCounter Sowtware's Web Site: http://www.sourceworkshop.com/ Versions: 1.0 Critical Level:...

Sql injection

SQL injection vulnerability in vCounter.php in vCounter 1.0 allows remote attackers to execute arbitrary SQL commands via the URI SERVERREQUESTURI variable...

CVE-2006-1499

SQL injection vulnerability in vCounter.php in vCounter 1.0 allows remote attackers to execute arbitrary SQL commands via the URI SERVERREQUESTURI variable...

CVE-2006-1499

SQL injection vulnerability in vCounter.php in vCounter 1.0 allows remote attackers to execute arbitrary SQL commands via the URI SERVERREQUESTURI variable...

CVE-2006-1499

CVE-2006-1499 affects the vCounter application (vCounter 1.0) via the script vCounter.php . The vulnerability is a SQL Injection where user-controlled data from the request URI ($_SERVER[REQUEST_URI]) is concatenated into an INSERT query, leading to arbitrary SQL execution. Root cause: inadequate...

CVE-2006-1499: Undefined Security Weakness

SQL injection vulnerability in vCounter.php in vCounter 1.0 allows remote attackers to execute arbitrary SQL commands via the URI SERVERREQUESTURI variable...