EUVD-2009-0462

Malware in sbrugna...

CVE-2009-0458

Multiple SQL injection vulnerabilities in admin/loginsubmit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary SQL commands via 1 the uid parameter aka Username field or 2 the pwd parameter aka Password field. NOTE: some of these details are obtained from third party...

Sql injection

Multiple SQL injection vulnerabilities in admin/loginsubmit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary SQL commands via 1 the uid parameter aka Username field or 2 the pwd parameter aka Password field. NOTE: some of these details are obtained from third party...

CVE-2009-0458

CVE-2009-0458 affects Whole Hog Ware Support 1.x. The admin/login_submit.php script exposes SQL injection via the uid (Username) and pwd (Password) fields, enabling remote attackers to execute arbitrary SQL commands. The NVD entry lists a high impact with a CVSS v2 base score of 7.5 (Network atta...

CVE-2009-0458

Multiple SQL injection vulnerabilities in admin/loginsubmit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary SQL commands via 1 the uid parameter aka Username field or 2 the pwd parameter aka Password field. NOTE: some of these details are obtained from third party...

CVE-2009-0460: Improper Authentication

Whole Hog Ware Support 1.x allows remote attackers to bypass authentication and obtain administrative access via an integer value in the adminid cookie...

CVE-2009-0458: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin/loginsubmit.php in Whole Hog Ware Support 1.x allow remote attackers to execute arbitrary SQL commands via 1 the uid parameter aka Username field or 2 the pwd parameter aka Password field. NOTE: some of these details are obtained from third party...