EUVD-2006-6075

Malware in sbrugna...

CVE-2006-6092

The CVE-2006-6092 entries describe SQL injection vulnerabilities in the 20/20 Auto Gallery vehiclelistings.asp page. Affected component: vehiclelistings.asp in 20/20 Auto Gallery. Root cause: vulnerable parameters (vehicleID, categoryID_list, sale_type, stock_number, manufacturer, model, year, vi...

CVE-2006-6092: Undefined Security Weakness

Multiple SQL injection vulnerabilities in vehiclelistings.asp in 20/20 Auto Gallery allow remote attackers to execute arbitrary SQL commands via the 1 vehicleID, 2 categoryIDlist, 3 saletype, 4 stocknumber, 5 manufacturer, 6 model, 7 vehicleID, 8 year, 9 vin, and 10 listingprice parameters...