CVE-2009-2780

Multiple cross-site scripting XSS vulnerabilities in 68 Classifieds 4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 cat parameter to category.php, view parameter to 2 login.php and 3 viewlisting.php, page parameter to 4 searchresults.php and 5 toplistings.php, and 6...

CVE-2009-2603: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in Escon SupportPortal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 cat and 2 tid parameters...

CVE-2009-2099: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the iJoomla RSS Feeder comijoomlarss component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in an xml action to index.php...

Sql injection

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6794: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in directory.php in Scripts For Sites SFS EZ Pub Site allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in viewfaqs.php in Scripts for Sites SFS EZ Auction allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6778: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewfaqs.php in Scripts for Sites SFS EZ Auction allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-6562: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in jaxlinklists.php in Jack tR Jax LinkLists 1.00 allows remote attackers to inject arbitrary web script or HTML via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a show action...

CVE-2008-6471: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detail.php in MountainGrafix easyLink 1.1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a show action...

CVE-2008-6345: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Forum.php in SolarCMS 0.53.8 and 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to indes.php. NOTE: some of these details are obtained from third party information...

CVE-2008-6246: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in category.php in Scripts For Sites SFS EZ Webring allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Sql injection

Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors...

CVE-2008-6064

Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors...

CVE-2008-6064: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in DomPHP 0.81 allow remote attackers to execute arbitrary SQL commands via the cat parameter to agenda/index.php, and unspecified other vectors...

CVE-2008-6015: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in search.php in EsFaq 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 keywords and 2 cat parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

PT-2009-2988 · Ninja · Ninja Blog

Name of the Vulnerable Software and Affected Versions: Ninja Blog version 4.8 Description: The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the entries/index.php file when magic quotes gpc is disabled. This is achieved by using a .. dot dot i...

CVE-2009-0325: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the cat parameter...

CVE-2009-0299

SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2009-0299: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Groone GLinks 2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter...