2 matches found
CVE-2006-3056
SQL injection vulnerability in language.php in VBZooM 1.01 allows remote attackers to execute arbitrary SQL commands via the Action parameter...
VBZoom 1.0 - SQL Injection
source: https://www.securityfocus.com/bid/5919/info A SQL injection vulnerability has been discovered in VBZoom v1.01. Due to insufficient sanitization of variables used to construct SQL queries, it is possible to modify the logic of a query, via a malicious request. Exploiting this issue could...