EUVD-2008-2482

Malware in sbrugna...

Sql injection

SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...

CVE-2008-2487

CVE-2008-2487 is an SQL injection vulnerability in MAXSITE 1.10 and earlier, exploitable via the category parameter in a webboard action on index.php. The issue allows remote attackers to execute arbitrary SQL commands. Affected product/version: MAXSITE 1.10 and earlier. Impact and risk: CVSS 2.0...

CVE-2008-2487

SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...

CVE-2008-2487: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...