CVE-2017-17592

Website Auction Marketplace 2.0.5 has SQL Injection via the search.php catid parameter...

Sql injection

Website Auction Marketplace 2.0.5 has SQL Injection via the search.php catid parameter...

CVE-2017-17592

Website Auction Marketplace 2.0.5 contains an SQL injection in the search.php cat_id parameter. The issue allows remote attackers to manipulate SQL queries, enabling potential data leakage or modification (per sources listed). The CVE is corroborated by multiple databases (NVD, CNVD, CVE.gov) wit...

CVE-2017-17592

Website Auction Marketplace 2.0.5 has SQL Injection via the search.php catid parameter...

CVE-2017-17592: Improper Neutralization of Special Elements used in an SQL Command

Website Auction Marketplace 2.0.5 has SQL Injection via the search.php catid parameter...

CVE-2017-14756: Improper Neutralization of Input During Web Page Generation

OpenText Document Sciences xPression formerly EMC Document Sciences xPression v4.5SP1 Patch 13 older versions might be affected as well is prone to Cross-Site Scripting: /xAdmin/html/Deployment catid...

qiest.co.th XSS vulnerability

Vulnerable URL: http://www.qiest.co.th/products.php?catid=31id=71"alert/OPENBUGBOUNTY/...

CVE-2015-4678

SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter to the default URI...

Sql injection

SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter to the default URI...

CVE-2015-4678

SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter to the default URI...

CVE-2015-4678: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter to the default URI...

WordPress Plugin Spider Event Calendar SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL server to set up a personal blog site . Spider Event Calendar is one of the highly configurable calendar plugin . A SQL injection vulnerability exist...

Sql injection

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php...

CVE-2015-2196

The CVE-2015-2196 issue affects WordPress Spider Event Calendar plugin (versions up to 1.4.9). The vulnerability arises in the spiderbigcalendar_month action when processing the cat_id parameter in wp-admin/admin-ajax.php, allowing an attacker to perform SQL injection. Impact described across sou...

CVE-2015-2196: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php...

glFusion 1.3.0 (search.php, cat_id param) - SQL Injection

No description provided by source...

Prozilla Directory Script (directory.php cat_id) SQL Injection Vulnerbility

No description provided by source. --==+================================================================================+==-- --==+ Prozilla Directory Script SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZ...

Cross site scripting

Cross-site scripting XSS vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2012-6043

Cross-site scripting XSS vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2012-6043: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the catid parameter...