CVE-2014-3962

Multiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute arbitrary SQL commands via the url parameter to 1 videocat.php or 2 single.php...

CVE-2014-3962: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Videos Tube 1.0 allow remote attackers to execute arbitrary SQL commands via the url parameter to 1 videocat.php or 2 single.php...

PT-2014-5638

Name of the Vulnerable Software and Affected Versions Videos Tube version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the url parameter to specific API endpoints, such as "videocat.php" or "single.php". Recommendations For version 1.0,...