560 matches found
Sql injection
SQL injection vulnerability in categoryedit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...
PT-2012-5293
Name of the Vulnerable Software and Affected Versions Proman Xpress version 5.0.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cid parameter in the category edit.php file. Recommendations For Proman Xpress version 5.0.1, consider...
CVE-2012-4265: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in categoryedit.php in Proman Xpress 5.0.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter...
PT-2011-5166 · Xt:Commerce · Xt:Commerce
Name of the Vulnerable Software and Affected Versions: xt:Commerce versions 3.0.4 SP2.1 and earlier Description: The issue allows remote attackers to hijack the authentication of admins for specific requests. This can be achieved through cross-site request forgery CSRF vulnerabilities. The...
CVE-2010-5043
SQL injection vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid parameter in an editItem action to administrator/index.php...
CVE-2010-5042
Cross-site scripting XSS vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the cid parameter in an editItem action to administrator/index.php. NOTE: some of these details are obtained from third party...
Sql injection
SQL injection vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid parameter in an editItem action to administrator/index.php...
CVE-2010-5043
SQL injection vulnerability in the DJ-ArtGallery comdjartgallery component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid parameter in an editItem action to administrator/index.php...
CVE-2009-5088
SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter...
CVE-2009-5088
SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter...
Sql injection
SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter...
CVE-2009-5088: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in secure/index.php in IdeaCart 0.02 allows remote attackers to execute arbitrary SQL commands via the cID parameter...
Sql injection
Multiple SQL injection vulnerabilities in Domain Technologie Control DTC before 0.32.9 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 admin/bwpermonth.php or 2 client/bwpermonth.php...
CVE-2011-0434
Multiple SQL injection vulnerabilities in Domain Technologie Control DTC before 0.32.9 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 admin/bwpermonth.php or 2 client/bwpermonth.php...
CVE-2011-0434: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Domain Technologie Control DTC before 0.32.9 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 admin/bwpermonth.php or 2 client/bwpermonth.php...
CVE-2010-2909: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in ttvideo.php in the TTVideo comttvideo component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter in a video action to index.php...
Directory traversal
Directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the cid parameter to album.html...
CVE-2010-2857: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the cid parameter to album.html...
PHP E-MALL Script SQL injection Vulnerability
No description provided by source. Exploit Title: PHP E-MALL Script SQL injection Vulnerability Date: 15/06/2010 Author: JaMbA vendor: www.sellatsite.com Tested on: Windows ::::::::::::::::::::::::::::: ::::::::::::::::::::::::: =====================================Exploit===============...