EUVD-2008-2482

Malware in sbrugna...

Sql injection

SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...

CVE-2008-2487

CVE-2008-2487 is an SQL injection vulnerability in MAXSITE 1.10 and earlier, exploitable via the category parameter in a webboard action on index.php. The issue allows remote attackers to execute arbitrary SQL commands. Affected product/version: MAXSITE 1.10 and earlier. Impact and risk: CVSS 2.0...

CVE-2008-2487

SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action...