EUVD-2009-0600

Malware in sbrugna...

EUVD-2008-6128

Malware in sbrugna...

EUVD-2009-2333

Malware in sbrugna...

Sql injection

SQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook Module 3.0.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the spamid parameter...

CVE-2009-2337

SQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook Module 3.0.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the spamid parameter...

CVE-2009-2337

The CVE-2009-2337 issue affects the w3b|cms Gaestebuch Guestbook Module 3.0.0, where a SQL injection vulnerability exists in includes/module/book/index.inc.php. The underlying cause is an unparameterized SQL query that can be exploited when magic_quotes_gpc is disabled, enabling remote attackers ...

CVE-2009-2337

SQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook Module 3.0.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the spamid parameter...

CVE-2009-2337: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook Module 3.0.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the spamid parameter...

CVE-2008-6158

Multiple unspecified vulnerabilities in the admin backend in w3bcms aka w3blabor CMS before 3.2.0 have unknown impact and remote attack vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the admin backend in w3bcms aka w3blabor CMS before 3.2.0 have unknown impact and remote attack vectors...

CVE-2008-6158

Technical details (affected product/versions, root cause, exploit vectors, or impact specifics) are not publicly available in the provided documents. Monitor for updates.

CVE-2008-6158

Multiple unspecified vulnerabilities in the admin backend in w3bcms aka w3blabor CMS before 3.2.0 have unknown impact and remote attack vectors...

CVE-2008-6158: Undefined Security Weakness

Multiple unspecified vulnerabilities in the admin backend in w3bcms aka w3blabor CMS before 3.2.0 have unknown impact and remote attack vectors...

Sql injection

SQL injection vulnerability in admin/index.php in w3bcms aka w3blabor CMS before 3.4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the benutzername parameter aka Username field in a login action...

CVE-2009-0597

CVE-2009-0597 describes an SQL injection in the w3b>cms (aka w3blabor CMS) admin/index.php before version 3.4.0, exploitable when magic_quotes_gpc is disabled. A remote attacker can inject SQL via the benutzername (Username) field in the login action, potentially executing arbitrary SQL comman...

CVE-2009-0597

SQL injection vulnerability in admin/index.php in w3bcms aka w3blabor CMS before 3.4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the benutzername parameter aka Username field in a login action...

CVE-2009-0597: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/index.php in w3bcms aka w3blabor CMS before 3.4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the benutzername parameter aka Username field in a login action...