EUVD-2011-4725

Malware in sbrugna...

CVE-2011-4806: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in main.php in phpAlbum 0.4.1.16 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 var1 and 2 keyword parameters...

CVE-2010-4982

SQL injection vulnerability in addressbook/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter...

Sql injection

SQL injection vulnerability in addressbook/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter...

CVE-2010-4982

SQL injection vulnerability in addressbook/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter...

PT-2011-1917

Name of the Vulnerable Software and Affected Versions My Kazaam Address & Contact Organizer affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the var1 parameter in the address book/contacts.php file. This enables attackers to...

CVE-2010-4982: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in addressbook/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter...