Design/Logic Flaw

admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the cid parameter...

CVE-2009-4876

CVE-2009-4876 affects Netrix CMS 1.0, where admin/cikkform.php can be abused to modify arbitrary pages via a direct request using the cid parameter. The vulnerability allows remote modification without authentication according to the description. No exploitation details or patch information are p...

CVE-2009-4876: Undefined Security Weakness

admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the cid parameter...

CVE-2010-1949: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Online News Paper Manager comjnewspaper component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid parameter to index.php. NOTE: some of these details are obtained from third party information...

CVE-2009-4724: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in shop.htm in PaymentProcessorScript.net PPScript allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to inject arbitrary web script or HTML via the 1 txtkeywords and 2 cid parameters...

CVE-2009-4689: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in PHP Shopping Cart Selling Website Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2010-0764

SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands via the cid parameter in a show action...

CVE-2010-0764: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands via the cid parameter in a show action...

Sql injection

SQL injection vulnerability in products.php in CommodityRentals Trade Manager Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2010-0693: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in products.php in CommodityRentals Trade Manager Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2009-3661: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the DJ-Catalog comdjcatalog component for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 id parameter in a showItem action and 2 cid parameter in a show action to index.php...

Sql injection

SQL injection vulnerability in the Kinfusion SportFusion comsportfusion component 0.2.2 through 0.2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid0 parameter in a teamdetail action to index.php...

CVE-2009-3348

Cross-site scripting XSS vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component...

CVE-2009-3349

SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a cat action to the home component...

Cross site scripting

Cross-site scripting XSS vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component...

Sql injection

SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a cat action to the home component...

CVE-2009-3348

Cross-site scripting XSS vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component...

CVE-2009-3349: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a cat action to the home component...

CVE-2009-3348: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component...