EUVD-2009-3513

Malware in sbrugna...

CVE-2009-3531

SQL injection vulnerability in vnews.php in Universe CMS 1.0.6 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-3531

CVE-2009-3531: A SQL injection in Universe CMS 1.0.6 affects vnews.php, exploitable via the id parameter to allow remote execution of arbitrary SQL. Base CVSS v2 score 7.5 (HIGH). No remediation details are provided in the connected documents.

Universe CMS 1.0.6 - 'vnews.php?id' SQL Injection

!/usr/bin/perl -w Universe CMS 1.0.6 id Remote SQL Injection Exploit Demo : http://www.universe.uni.org.pl Download : http://www.universe.uni.org.pl/upload/universecms106.rar Found by : Mr.tro0oqy E-mail : [email protected] special thank for my teacher "Stack" system"color e"; print...