EUVD-2005-4164

Malware in sbrugna...

CVE-2005-4169: Undefined Security Weakness

Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 let parameter in a viewlist action to authors.php and 2 sid parameter to viewstory.php...