EUVD-2007-1613

Malware in sbrugna...

EUVD-2008-6736

Malware in sbrugna...

Sql injection

SQL injection vulnerability in viewcomments.php in Scripts For Sites SFS EZ Hot or Not allows remote attackers to execute arbitrary SQL commands via the phid parameter...

CVE-2008-6776

SQL injection vulnerability in viewcomments.php in Scripts For Sites SFS EZ Hot or Not allows remote attackers to execute arbitrary SQL commands via the phid parameter...

CVE-2008-6776

CVE-2008-6776 affects Scripts For Sites (SFS) EZ Hot or Not, specifically the viewcomments.php component. The issue is a SQL injection via the phid parameter, enabling remote attackers to execute arbitrary SQL commands. The vulnerability is documented across multiple feeds (NVD and related listin...

CVE-2008-6776

SQL injection vulnerability in viewcomments.php in Scripts For Sites SFS EZ Hot or Not allows remote attackers to execute arbitrary SQL commands via the phid parameter...

sfshotornot-sql.txt

SFS EZ Hot or Notviewcomments.php?phid Remote SQL Injection Vulnerability =============================================================== ---------------------------------------------------------------- script : SFS EZ Hot ot Not script : http://www.scripts-for-sites.info Risk : High...

Sql injection

SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter...

CVE-2007-1619

SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter...

CVE-2007-1619

SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter...

CVE-2007-1619

CVE-2007-1619 affects ScriptMagix Photo Rating 2.0 and earlier, with a vulnerability in viewcomments.php that allows remote attackers to inject SQL via the phid parameter. The underlying flaw is an SQL injection in the handling of phid, enabling arbitrary SQL commands (impacting confidentiality, ...

ScriptMagix Photo Rating ViewComments.PHP SQL注入漏洞

ScriptMagix Photo Rating是一款基于PHP的WEB应用程序。 ScriptMagix Photo Rating不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'ViewComments.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 ScriptMagix Photo Rating 2.0 目前没有解决方案提供： http://www.scriptmagix.com/index.php?cmd=2&id=4 !/usr/bin/perl Script...