EUVD-2012-6472

Malware in sbrugna...

CVE-2012-6626

The CVE-2012-6626 entry concerns a SQL injection in verify-user.php of b2ePMS 1.0 where the username field can be exploited to execute arbitrary SQL commands. Affected software: b2ePMS 1.0 (verify-user.php). Underlying cause: input from the username field is not properly sanitized, enabling injec...

PT-2014-2395

Name of the Vulnerable Software and Affected Versions b2ePMS version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the username field in the verify-user.php file. Recommendations For b2ePMS version 1.0, consider restricting access to the...

CVE-2012-6626: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in verify-user.php in b2ePMS 1.0 allows remote attackers to execute arbitrary SQL commands via the username field...